MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113919

Malicious code in eslint-config-bellatrix-protractor-procyon npm...

EUVD-2025-113912

Malicious code in eslint-config-event-convict-zenith npm...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-barnard-bunyan-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f27119a3e95fe00266bbfda55d5c45c50fc7ef145b70d15e67d742e46f33fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124892

Malicious code in miranda-config-odin-spectron npm...

EUVD-2025-121250

Malicious code in titan-fomalhaut-node-config-quark npm...

MAL-2025-142424 Malicious code in farout-sails-eslint-config-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5350b546b48ac29a1dcbeddbd48f6a6bf51e9bc12a6a2bab1c78cfd8c5566f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140160 Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113905

Malicious code in eslint-config-postcss-loader-ignite-webdriver-mocha npm...

EUVD-2025-120368

Malicious code in wolf-sequelize-gatsby-node-config npm...

Malicious code in karma-pegasus-config-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7dcaac8a0df43e485ca6c5ee3f16edf05faefa4c30aba7801a07fc475e2998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-config-nuxtjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fbc9a2ccf5396c8390b337cdaf4eb71c4bf4f4e489939c1669648819f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140210 Malicious code in bulma-config-kinetic-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22186b486a169f8eb3e7f635c7232051ec48c4b08231c118f086dbe26e97a700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121240

Malicious code in titan-node-config-janus-ophiuchus npm...

EUVD-2025-123024

Malicious code in quantum-commitlint-config-angular-event-firebase npm...

EUVD-2025-112640

Malicious code in hyperion-eslint-config-oberon-babel npm...

Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...