EUVD-2025-112842

Malicious code in hercules-async-sync-less-loader npm...

EUVD-2025-112823

Malicious code in hercules-meteor-sync-semantic-ui npm...

EUVD-2025-113677

Malicious code in fetch-betelgeuse-schema-sync npm...

EUVD-2025-114897

Malicious code in cosmos-nightwatch-sync-redis npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-116455

Malicious code in atlas-karma-sync-galaxy npm...

EUVD-2025-116314

Malicious code in avior-sync-enif-protractor npm...

EUVD-2025-115272

Malicious code in cluster-sync-development-cosmos npm...

EUVD-2025-124636

Malicious code in nashira-sagitta-tailwindcss-sync npm...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

EUVD-2025-115044

Malicious code in configstore-sync-magellan-jabbah npm...

MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123548

Malicious code in polaris-sync-procyon-sagitta npm...

EUVD-2025-122608

Malicious code in request-sync-magellan-loopback npm...

EUVD-2025-123174

Malicious code in proxima-vortex-buffer-sync npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...