MAL-2025-142327 Malicious code in event-supervisor-eslint-config-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f9d2558669f4486f9e0526eb7585e053c2ee108448dc16a4490384a0cb5163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145956 Malicious code in parcel-eslint-config-castor-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed09a09c963d1bf3ef1d986a98accc358353ab58dfcebaa264519dedcfc5a6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124893

Malicious code in miranda-commitlint-config-angular-castor-thuban npm...

EUVD-2025-111256

Malicious code in mensa-pm2-metalsmith-eslint-config npm...

EUVD-2025-116640

Malicious code in antd-node-config-slides-lyra npm...

MAL-2025-145766 Malicious code in octans-cross-env-config-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba865bb46d908c3875bb6b5f0d1d1c3fd422702b2ace9d2f28ddc7dcdfc5fd87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140967 Malicious code in commitlint-config-angular-kronos-nebula-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb22d340281c86896edb316e63bdb92125085062db8479e56d6e07db6cbe92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145270 Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140957 Malicious code in commitlint-config-angular-babel-tethys-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04a333bf1423d0e012301db68a1e6f00312db7d04e434040b97bb4bd1191282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111999

Malicious code in karma-pegasus-config-europa npm...

EUVD-2025-116801

Malicious code in algol-node-config-soap-odin npm...

EUVD-2025-120122

Malicious code in yildun-config-electron-ophiuchus npm...

EUVD-2025-123249

Malicious code in prompts-playwright-cli-commitlint-config-angular npm...

EUVD-2025-112453

Malicious code in inquirer-sails-bulma-commitlint-config-angular npm...

Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115077

Malicious code in config-meissa-norma-webpack npm...

Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...