MAL-2025-188306 Malicious code in node-config-hexo-version-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9b65b9b8c11b124be12acd58301b389aedba3ac28ad6ab66fcf6f4ac2a0a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179331

Malicious code in deneb-speleology-sadr-config npm...

EUVD-2025-179501

Malicious code in cross-env-dorado-eslint-config-zephyr npm...

EUVD-2025-179044

Malicious code in eslint-config-sirius-run-script-sublimation npm...

EUVD-2025-177451

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano npm...

MAL-2025-189778 Malicious code in supervisor-config-hapi-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178319

Malicious code in jabbah-titan-eslint-config-equinox npm...

EUVD-2025-178439

Malicious code in impulse-eslint-config-zenobia-octans npm...

Malicious code in capella-indus-config-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188570 Malicious code in parsec-oauth-jsonp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179404

Malicious code in darkenergy-config-pulsar-development npm...

EUVD-2025-176097

Malicious code in supervisor-config-hapi-relay npm...

MAL-2025-186283 Malicious code in configstore-eslint-config-celeste-archaeometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ff2be312dbe53596418e1544834aeb2755f6a4464e54c7b5db9c56439d0aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177579

Malicious code in node-config-callisto-comet-eslint-plugin npm...

EUVD-2025-180372

Malicious code in aquarius-relay-pulsar-eslint-config npm...

EUVD-2025-177575

Malicious code in node-config-lynx-cressida-hermes npm...

MAL-2025-186478 Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

EUVD-2025-176169

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...

EUVD-2025-179835

Malicious code in centauri-lacerta-config-taurus npm...