EUVD-2025-124858

Malicious code in miranda-sync-despina-auth0 npm...

Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-123371

Malicious code in process-fornax-local-sync npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111575

Malicious code in loop-yonder-betelgeuse-sync npm...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

Malicious code in juno-sync-middleware-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5262c9aa5283b0187448f086b75b73d09c9b6329b9468931b0f2d7e353f198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112942

Malicious code in halley-sync-colors-loopback npm...

EUVD-2025-112527

Malicious code in ini-delphinus-fetch-sync npm...

EUVD-2025-121494

Malicious code in sync-telesto-configstore-javascript npm...

EUVD-2025-122440

Malicious code in rocket-sync-jovian-charon npm...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124169

Malicious code in oberon-puppeteer-sync-eclipse npm...

EUVD-2025-115222

Malicious code in comet-prettier-stylelint-sync-perseus npm...

EUVD-2025-121504

Malicious code in sync-jasmine-elara-mensa npm...

EUVD-2025-121502

Malicious code in sync-meissa-meissa-lacerta npm...

MAL-2025-143753 Malicious code in izar-cassini-ursa-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...