EUVD-2025-115080

Malicious code in config-lint-staged-backend-mui npm...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111937

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...

EUVD-2025-113903

Malicious code in eslint-config-promise-jest-winston npm...

EUVD-2025-112441

Malicious code in install-config-hydra-pm2 npm...

EUVD-2025-113735

Malicious code in express-eris-jabbah-eslint-config npm...

EUVD-2025-113941

Malicious code in eris-duplex-firebase-eslint-config npm...

Malicious code in config-izar-fetch-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a2d8fc86c6915594384794a9189606b65ba1f652cdae1d45debe45640afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124418

Malicious code in node-config-ariel-cosmiconfig-grus npm...

EUVD-2025-124859

Malicious code in miranda-stream-node-config-inquirer npm...

EUVD-2025-115072

Malicious code in config-puppeteer-spica-jupiter npm...

EUVD-2025-114693

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay npm...

EUVD-2025-123591

Malicious code in polaris-commitlint-config-angular-gemini-mdx npm...

EUVD-2025-113800

Malicious code in event-duplex-node-config-public npm...

MAL-2025-148121 Malicious code in spectron-node-config-prettier-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38125f8865078f53318f1d7935b87aad45c4b1dda28e2906a20fdb84ff3cf22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140957 Malicious code in commitlint-config-angular-babel-tethys-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04a333bf1423d0e012301db68a1e6f00312db7d04e434040b97bb4bd1191282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142202 Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...