MAL-2025-142787 Malicious code in galaxy-centauri-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152542847fd6e29764406706789bc7deed6adcdaafe04f284d237d422af5695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122169

Malicious code in sedna-barnard-bunyan-commitlint-config-angular npm...

Malicious code in mui-npm-typeorm-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6314a131d3ae7ce58ce6e7f2f0c12949b4c1a9bc4551a6aa7fd2968d2e38c876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123626

Malicious code in pm2-cz-conventional-changelog-config-release-it npm...

EUVD-2025-112724

Malicious code in hugo-eslint-config-rimraf-nodejs npm...

EUVD-2025-113849

Malicious code in europa-config-semantic-release-aquarius npm...

EUVD-2025-123710

Malicious code in pino-config-equinox-mui npm...

EUVD-2025-115074

Malicious code in config-promise-weywot-cz-conventional-changelog npm...

EUVD-2025-120168

Malicious code in yakutsk-config-mutation-ursa npm...

EUVD-2025-115068

Malicious code in config-terser-webpack-plugin-husky-eleventy npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-124404

Malicious code in node-config-pulsar-google-weywot npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-115077

Malicious code in config-meissa-norma-webpack npm...

MAL-2025-143039 Malicious code in gridsome-eslint-config-native-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139912 Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...