Malicious code in sync-deimos-cache-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a4f27a43e6b5e2f1728c8fc953fd87116e2317c06437a656d559d75fa0bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

EUVD-2025-121495

Malicious code in sync-sedna-titan-neptune npm...

EUVD-2025-112966

Malicious code in halley-ignite-protractor-sync npm...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

Malicious code in oberon-puppeteer-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80b69b8816f3158c875c37490b6600acf86a642161971dc108a3b68d9273ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124361

Malicious code in nodejs-cygnus-sync-markdown-pdf npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-123174

Malicious code in proxima-vortex-buffer-sync npm...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112527

Malicious code in ini-delphinus-fetch-sync npm...

EUVD-2025-121491

Malicious code in sync-yaml-elara-hercules npm...

EUVD-2025-112842

Malicious code in hercules-async-sync-less-loader npm...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124169

Malicious code in oberon-puppeteer-sync-eclipse npm...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

Malicious code in rocket-sync-jovian-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6a723023ff0c85d131e2709f401499111bc5defade3c49268b9fbb808d47c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...