MAL-2025-143170 Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148213 Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142987 Malicious code in got-sadr-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143753 Malicious code in izar-cassini-ursa-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114897

Malicious code in cosmos-nightwatch-sync-redis npm...

EUVD-2025-113677

Malicious code in fetch-betelgeuse-schema-sync npm...

EUVD-2025-115044

Malicious code in configstore-sync-magellan-jabbah npm...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

Malicious code in sync-deimos-cache-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a4f27a43e6b5e2f1728c8fc953fd87116e2317c06437a656d559d75fa0bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111575

Malicious code in loop-yonder-betelgeuse-sync npm...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

EUVD-2025-121514

Malicious code in sync-antares-rehype-yaml npm...

EUVD-2025-121649

Malicious code in start-mongoose-scripts-sync npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

EUVD-2025-124751

Malicious code in mongoose-yakutsk-pegasus-sync npm...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...