EUVD-2025-121502

Malicious code in sync-meissa-meissa-lacerta npm...

MAL-2025-143753 Malicious code in izar-cassini-ursa-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111749

Malicious code in levels-sync-galaxy-inquirer npm...

EUVD-2025-112360

Malicious code in izar-cassini-ursa-sync npm...

EUVD-2025-112115

Malicious code in jsonp-ignite-sync-link npm...

EUVD-2025-112072

Malicious code in juno-sync-middleware-ini npm...

Malicious code in avior-sync-enif-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e3a83c0ebc9b62ac07880fd2b7ee24acf354995ffbb017c950d19e49d7f208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-sadr-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-npm-chai-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf16bec19825fcb8796255ce3e4faa961efe40d86c0ee3f1bb66bf1526ccb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-mui-jasmine-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1df8a6d2bc023876d443ab956c891fa6eed3e890a12c4ae30e21b71e81c3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-sync-procyon-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-vortex-buffer-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52486fb9b8c443812e90f249479354ead4215bfd779e8b4540f4a7ff76bf0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-sync-jovian-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6a723023ff0c85d131e2709f401499111bc5defade3c49268b9fbb808d47c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-deimos-cache-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a4f27a43e6b5e2f1728c8fc953fd87116e2317c06437a656d559d75fa0bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...