EUVD-2025-177345

Malicious code in paleontology-sedna-enif-sync npm...

EUVD-2025-179594

Malicious code in configstore-quark-sync-callback npm...

EUVD-2025-179062

Malicious code in eris-sync-loglevel-dorado npm...

EUVD-2025-180232

Malicious code in aurora-sync-buffer-canopus npm...

EUVD-2025-179817

Malicious code in centaurus-perseus-remark-sync npm...

EUVD-2025-176233

Malicious code in standard-altair-izar-sync npm...

EUVD-2025-176090

Malicious code in sync-hugo-xanadu-module npm...

Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177393

Malicious code in outercore-sync-fornax-lightyear npm...

EUVD-2025-178714

Malicious code in geomorphology-cressida-sync-atlas npm...

EUVD-2025-176087

Malicious code in sync-vega-apex-prettier-plugin-markdown npm...

EUVD-2025-176653

Malicious code in restart-warp-webdriver-mocha-sync npm...

EUVD-2025-178401

Malicious code in init-venus-sync-figures npm...

MAL-2025-188489 Malicious code in outercore-sync-fornax-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2e853eda7b0af152340f61eb4696e8f76559b416699655d34aa888bfc5f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189222 Malicious code in restart-warp-webdriver-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bf93b3651fd9e5262e28a4c025dfe14338cabf906f3143dad4f1a1cf765f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-altair-izar-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176278

Malicious code in spawn-nova-antares-sync npm...

EUVD-2025-179352

Malicious code in delphinus-tool-sync-geckodriver npm...

EUVD-2025-176723

Malicious code in relay-dagda-sync-graviton npm...

MAL-2025-186820 Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...