EUVD-2025-124309

Malicious code in non-blocking-kastra-eslint-config-babel npm...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-124603

Malicious code in nconf-exec-blitz-node-config npm...

EUVD-2025-115389

Malicious code in charon-commitlint-config-angular-mdx-umbriel npm...

EUVD-2025-124419

Malicious code in node-config-aquarius-selenium-betelgeuse npm...

EUVD-2025-121089

Malicious code in typeorm-chalk-eslint-config-geckodriver npm...

EUVD-2025-116143

Malicious code in bellatrix-titan-eslint-config-envconfig npm...

EUVD-2025-121354

Malicious code in test-meissa-node-config-vega npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-121175

Malicious code in tool-semantic-ui-loop-eslint-config npm...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-commitlint-config-angular-pyxis-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de913c34169e8ae4ca886f994f10fbfbfcaf2c7d8b2398a257a5389e21b76c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-eslint-config-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99029eef74460dc4ac507dfa0acda2cb632328c787ed90485c02bab83dcb2f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142544 Malicious code in fomalhaut-library-carina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf33dfb38061f04102f930ca05f066db39305ec29335d77c56c418bba3bda7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113914

Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin npm...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...