Malicious code in rocket-sync-jovian-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6a723023ff0c85d131e2709f401499111bc5defade3c49268b9fbb808d47c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124395

Malicious code in node-sass-antares-gulp-sync npm...

Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-115685

Malicious code in carina-rate-limiter-perseus-sync npm...

EUVD-2025-115947

Malicious code in buffer-gatsby-less-sync npm...

EUVD-2025-111801

Malicious code in less-json-sync-readable npm...

Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111749

Malicious code in levels-sync-galaxy-inquirer npm...

EUVD-2025-116850

Malicious code in airbnb-colors-sync-hapi npm...

Malicious code in neptune-mui-jasmine-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1df8a6d2bc023876d443ab956c891fa6eed3e890a12c4ae30e21b71e81c3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

EUVD-2025-124356

Malicious code in nodejs-frontend-sync-command npm...

EUVD-2025-122440

Malicious code in rocket-sync-jovian-charon npm...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

EUVD-2025-121511

Malicious code in sync-centauri-impulse-selenium npm...

EUVD-2025-111624

Malicious code in local-odin-sync-public npm...

EUVD-2025-121493

Malicious code in sync-transport-resolvers-quantum npm...

EUVD-2025-123371

Malicious code in process-fornax-local-sync npm...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...