EUVD-2025-115077

Malicious code in config-meissa-norma-webpack npm...

Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-dagda-heka-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113420

Malicious code in framework-quasar-spawn-commitlint-config-angular npm...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114995

Malicious code in cors-antares-commitlint-config-angular-iota npm...

EUVD-2025-123591

Malicious code in polaris-commitlint-config-angular-gemini-mdx npm...

EUVD-2025-123050

Malicious code in pyxis-config-eslint-plugin-exec npm...

EUVD-2025-112411

Malicious code in io-node-config-rate-limiter-concurrently npm...

EUVD-2025-121175

Malicious code in tool-semantic-ui-loop-eslint-config npm...

EUVD-2025-121924

Malicious code in slidev-config-prettier-plugin-markdown-start npm...

EUVD-2025-113248

Malicious code in geckodriver-forever-eslint-config-pino-pretty npm...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

EUVD-2025-124405

Malicious code in node-config-non-blocking-meissa-middleware npm...

EUVD-2025-113903

Malicious code in eslint-config-promise-jest-winston npm...

EUVD-2025-120959

Malicious code in uninstall-sedna-config-helios npm...

MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...