17619 matches found
EUVD-2025-179835
Malicious code in centauri-lacerta-config-taurus npm...
EUVD-2025-175603
Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config npm...
EUVD-2025-175571
Malicious code in weywot-tool-eslint-config-dotenv npm...
EUVD-2025-178467
Malicious code in hyperion-postgres-eslint-config-warp npm...
EUVD-2025-176827
Malicious code in quito-config-lightyear-quito npm...
EUVD-2025-179043
Malicious code in eslint-config-uninstall-mongoose-superflare npm...
EUVD-2025-176707
Malicious code in release-it-perseus-ini-node-config npm...
EUVD-2025-180463
Malicious code in algol-airbnb-eslint-config-elara npm...
MAL-2025-188308 Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178577
Malicious code in heka-markdownlint-rollup-node-config npm...
MAL-2025-189213 Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667df92958e84b0615d81c3cbb178f8c117b019ca8357f70aa7c4c9d742be2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186899 Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-frontend-eslint-config-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2500c73f9e15b142f13f572a687f151b1f6a8e3eb54fb96cbd58ce242f02f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-dorado-eslint-config-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177223
Malicious code in phenomic-resolvers-node-config-postgres npm...
MAL-2025-188560 Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-eslint-config-draco-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in leda-jsonp-dependencies-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5371fbf950c99d96b08240fa9f1145f24d3a4062427ce516eacafbaebe39885c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186839 Malicious code in eslint-config-uninstall-mongoose-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389e7f6cba244996efe78ec18203346fe48ed7af508ed9911925bb724a6fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...