EUVD-2025-122169

Malicious code in sedna-barnard-bunyan-commitlint-config-angular npm...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...

EUVD-2025-123441

Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin npm...

MAL-2025-144468 Malicious code in lint-staged-terser-chakra-ui-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555aa83a6752f98aa45cf50f95aab2be0bb0f5156ba979089b0af5a64a3f030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139973 Malicious code in betelgeuse-config-nuxtjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fbc9a2ccf5396c8390b337cdaf4eb71c4bf4f4e489939c1669648819f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6a0d51daae52a547b9b3598450667891d02849ff498b84efe3b37fcfd722e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124398

Malicious code in node-config-vuetify-less-loader-version npm...

EUVD-2025-114445

Malicious code in docusaurus-eslint-config-telesto-callback npm...

EUVD-2025-111799

Malicious code in less-loader-centauri-subscription-config npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-115944

Malicious code in buffer-levels-commitlint-config-angular-protractor npm...

EUVD-2025-115543

Malicious code in ceres-eridanus-eslint-config-triton npm...

MAL-2025-146532 Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124399

Malicious code in node-config-upgrade-library-carpo npm...

EUVD-2025-124413

Malicious code in node-config-gatsby-terser-antares npm...

EUVD-2025-116434

Malicious code in atlas-yaml-ursa-eslint-config npm...

EUVD-2025-120377

Malicious code in wolf-ophiuchus-eslint-config-framework npm...

MAL-2025-148121 Malicious code in spectron-node-config-prettier-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38125f8865078f53318f1d7935b87aad45c4b1dda28e2906a20fdb84ff3cf22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...