EUVD-2025-124636

Malicious code in nashira-sagitta-tailwindcss-sync npm...

EUVD-2025-124751

Malicious code in mongoose-yakutsk-pegasus-sync npm...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-123968

Malicious code in parcel-carpo-cypress-sync npm...

EUVD-2025-121514

Malicious code in sync-antares-rehype-yaml npm...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-116314

Malicious code in avior-sync-enif-protractor npm...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

EUVD-2025-112115

Malicious code in jsonp-ignite-sync-link npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

Malicious code in spectron-juno-sync-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029c69347857d8315b739f23392a7f38ae2dfc69862917d707b23b71ff615f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124574

Malicious code in nebula-mdx-polaris-sync npm...

EUVD-2025-121649

Malicious code in start-mongoose-scripts-sync npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...