EUVD-2025-115947

Malicious code in buffer-gatsby-less-sync npm...

Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113684

Malicious code in farout-sync-regulus-node-config npm...

MAL-2025-143156 Malicious code in halley-mysql-server-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ff79e54f23575a8eaefcecf238fe02a47095af96770878b4d382e9964a3475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

EUVD-2025-121492

Malicious code in sync-wasat-deimos-hapi npm...

EUVD-2025-121495

Malicious code in sync-sedna-titan-neptune npm...

EUVD-2025-121496

Malicious code in sync-rigel-prettier-stylelint-concurrently npm...

Malicious code in oberon-puppeteer-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80b69b8816f3158c875c37490b6600acf86a642161971dc108a3b68d9273ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149664 Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140696 Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142987 Malicious code in got-sadr-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144540 Malicious code in loop-yonder-betelgeuse-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c945f5dae18315f4787680fe0df2b8745a6117d6af0a32e4b1857099ceea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...