EUVD-2025-177653

Malicious code in neptune-sync-holography-xenobiology npm...

EUVD-2025-177345

Malicious code in paleontology-sedna-enif-sync npm...

EUVD-2025-179594

Malicious code in configstore-quark-sync-callback npm...

EUVD-2025-179062

Malicious code in eris-sync-loglevel-dorado npm...

EUVD-2025-180232

Malicious code in aurora-sync-buffer-canopus npm...

EUVD-2025-179817

Malicious code in centaurus-perseus-remark-sync npm...

EUVD-2025-176090

Malicious code in sync-hugo-xanadu-module npm...

Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177393

Malicious code in outercore-sync-fornax-lightyear npm...

EUVD-2025-178714

Malicious code in geomorphology-cressida-sync-atlas npm...

EUVD-2025-176087

Malicious code in sync-vega-apex-prettier-plugin-markdown npm...

EUVD-2025-176653

Malicious code in restart-warp-webdriver-mocha-sync npm...

EUVD-2025-178401

Malicious code in init-venus-sync-figures npm...

Malicious code in standard-altair-izar-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176278

Malicious code in spawn-nova-antares-sync npm...

EUVD-2025-179352

Malicious code in delphinus-tool-sync-geckodriver npm...

EUVD-2025-176723

Malicious code in relay-dagda-sync-graviton npm...

MAL-2025-186820 Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178231

Malicious code in jwt-sync-ora-selenium npm...

MAL-2025-186065 Malicious code in centaurus-perseus-remark-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce96f56e1b53ba28c31e4d27ed1b224358022b063da73e5cf10330319508792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...