EUVD-2025-121928

Malicious code in slides-supervisor-apollo-sync npm...

EUVD-2025-115044

Malicious code in configstore-sync-magellan-jabbah npm...

Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121503

Malicious code in sync-jsonp-less-iota npm...

MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146373 Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124751

Malicious code in mongoose-yakutsk-pegasus-sync npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

EUVD-2025-113677

Malicious code in fetch-betelgeuse-schema-sync npm...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

Malicious code in sync-pulsar-sequelize-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c73aa1ffed6dde5b54eb53a2b63d7a9e76281b20437c3d61902ec25350afeb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115272

Malicious code in cluster-sync-development-cosmos npm...

EUVD-2025-124361

Malicious code in nodejs-cygnus-sync-markdown-pdf npm...

EUVD-2025-123174

Malicious code in proxima-vortex-buffer-sync npm...

EUVD-2025-115947

Malicious code in buffer-gatsby-less-sync npm...

EUVD-2025-112823

Malicious code in hercules-meteor-sync-semantic-ui npm...

EUVD-2025-124574

Malicious code in nebula-mdx-polaris-sync npm...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

EUVD-2025-121504

Malicious code in sync-jasmine-elara-mensa npm...