MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111702

Malicious code in link-kinetic-phenomic-node-config npm...

EUVD-2025-124783

Malicious code in mongodb-package-quark-node-config npm...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-114652

Malicious code in dactyl-typeorm-chromedriver-node-config npm...

EUVD-2025-111577

Malicious code in loop-xenos-config-pegasus npm...

EUVD-2025-115525

Malicious code in chai-antares-gravity-eslint-config npm...

EUVD-2025-115894

Malicious code in bulma-config-kinetic-eslint-config npm...

MAL-2025-140973 Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c226c4b1a3a0f8193958d600960e0a77134c920f899336f377da7683130fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111937

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...

EUVD-2025-111194

Malicious code in meteor-node-config-hugo-fomalhaut npm...

Malicious code in csrf-pulsar-config-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6165b6024805b3adc5e2199016ba077ca2901335befbde30b4f24903628994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124648

Malicious code in nashira-config-fork-cli npm...

EUVD-2025-123213

Malicious code in proxima-commitlint-config-angular-pyxis-fork npm...

EUVD-2025-121968

Malicious code in sirius-impulse-node-config-spica npm...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113913

Malicious code in eslint-config-europa-yaml-triton npm...

EUVD-2025-113941

Malicious code in eris-duplex-firebase-eslint-config npm...

Malicious code in publish-epimetheus-redis-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe3501ebf5ee0e9d66130ec7cdd596273f343020bfec46601162a249a5ae585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139400 Malicious code in antares-config-prompts-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416d76dab1ee5c855fec1bd08f77080762c427bf97170b08dc63dfcd76b77258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...