Malicious code in xenon-sync-despina-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144041 Malicious code in juno-sync-middleware-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5262c9aa5283b0187448f086b75b73d09c9b6329b9468931b0f2d7e353f198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142987 Malicious code in got-sadr-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121511

Malicious code in sync-centauri-impulse-selenium npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

EUVD-2025-121497

Malicious code in sync-relay-rocket-scripts npm...

EUVD-2025-115685

Malicious code in carina-rate-limiter-perseus-sync npm...

EUVD-2025-121503

Malicious code in sync-jsonp-less-iota npm...

Malicious code in sync-deimos-cache-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a4f27a43e6b5e2f1728c8fc953fd87116e2317c06437a656d559d75fa0bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

EUVD-2025-112966

Malicious code in halley-ignite-protractor-sync npm...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

EUVD-2025-121492

Malicious code in sync-wasat-deimos-hapi npm...

EUVD-2025-121495

Malicious code in sync-sedna-titan-neptune npm...

EUVD-2025-121496

Malicious code in sync-rigel-prettier-stylelint-concurrently npm...

Malicious code in oberon-puppeteer-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80b69b8816f3158c875c37490b6600acf86a642161971dc108a3b68d9273ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120267

Malicious code in xenon-sync-despina-heka npm...

Malicious code in carina-rate-limiter-perseus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de077fa85a8aac069d8b85948635a847e137b4cec30da3ac961db323496c642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...