Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-dagda-heka-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113420

Malicious code in framework-quasar-spawn-commitlint-config-angular npm...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114995

Malicious code in cors-antares-commitlint-config-angular-iota npm...

EUVD-2025-123050

Malicious code in pyxis-config-eslint-plugin-exec npm...

EUVD-2025-112411

Malicious code in io-node-config-rate-limiter-concurrently npm...

EUVD-2025-121175

Malicious code in tool-semantic-ui-loop-eslint-config npm...

EUVD-2025-121924

Malicious code in slidev-config-prettier-plugin-markdown-start npm...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

EUVD-2025-124405

Malicious code in node-config-non-blocking-meissa-middleware npm...

EUVD-2025-120959

Malicious code in uninstall-sedna-config-helios npm...

MAL-2025-144315 Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148001 Malicious code in slidev-config-prettier-plugin-markdown-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e834e497b6d587ec03ff3266acade36150e5844f41ba3cf81c5e4d8bed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114881

Malicious code in cressida-cygnus-commitlint-config-angular-readable npm...

MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120638

Malicious code in wasat-iota-juno-node-config npm...

MAL-2025-145443 Malicious code in nightmare-node-config-update-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c2d285958d9e9c1654d8bb5b3806e3a886b0e3cba0e0e869ed94a7b861673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...