EUVD-2025-116314

Malicious code in avior-sync-enif-protractor npm...

EUVD-2025-124574

Malicious code in nebula-mdx-polaris-sync npm...

Malicious code in spectron-juno-sync-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029c69347857d8315b739f23392a7f38ae2dfc69862917d707b23b71ff615f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124636

Malicious code in nashira-sagitta-tailwindcss-sync npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

Malicious code in avior-sync-enif-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e3a83c0ebc9b62ac07880fd2b7ee24acf354995ffbb017c950d19e49d7f208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122796

Malicious code in registry-firebase-command-sync npm...

EUVD-2025-123968

Malicious code in parcel-carpo-cypress-sync npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124169

Malicious code in oberon-puppeteer-sync-eclipse npm...

EUVD-2025-112115

Malicious code in jsonp-ignite-sync-link npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

EUVD-2025-112072

Malicious code in juno-sync-middleware-ini npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

EUVD-2025-115222

Malicious code in comet-prettier-stylelint-sync-perseus npm...

EUVD-2025-124858

Malicious code in miranda-sync-despina-auth0 npm...

MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...