MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121594

Malicious code in style-loader-metalsmith-jasmine-eslint-config npm...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

EUVD-2025-113145

Malicious code in google-nova-spectron-webdriver-config npm...

EUVD-2025-124416

Malicious code in node-config-elektra-europa-algol npm...

EUVD-2025-112332

Malicious code in jabbah-leda-install-eslint-config npm...

EUVD-2025-111646

Malicious code in lint-staged-terser-chakra-ui-node-config npm...

EUVD-2025-115463

Malicious code in chalk-jest-nestjs-node-config npm...

EUVD-2025-120712

Malicious code in vuetify-node-config-cressida-slidev npm...

MAL-2025-142195 Malicious code in eslint-config-cygnus-iota-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87ad769ec5476d02c6dbeed46e43ec25e7454715b7d55eeb428f0505d2483b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-cygnus-iota-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87ad769ec5476d02c6dbeed46e43ec25e7454715b7d55eeb428f0505d2483b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142375 Malicious code in express-eris-jabbah-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68261a9da999cc9d67533680cbe96564c0b0a0adf9718cc791d010c9f8d58f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144859 Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124747

Malicious code in morgan-commitlint-config-angular-repository-dynamo npm...

EUVD-2025-121845

Malicious code in solis-node-config-antares-levels npm...

EUVD-2025-115072

Malicious code in config-puppeteer-spica-jupiter npm...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...