MAL-2025-141525 Malicious code in delphinus-node-config-equinox-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6623f2a96d2cd18057f65d1f01dcc6723a7519e716b23ff5723f92fd99c102b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113919

Malicious code in eslint-config-bellatrix-protractor-procyon npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-115067

Malicious code in config-umbriel-tailwindcss-webpack npm...

Malicious code in betelgeuse-config-nuxtjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fbc9a2ccf5396c8390b337cdaf4eb71c4bf4f4e489939c1669648819f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122756

Malicious code in rehype-docusaurus-nightmare-node-config npm...

EUVD-2025-124397

Malicious code in node-config-warp-resolvers-tethys npm...

EUVD-2025-114828

Malicious code in csrf-commitlint-config-angular-axios-lacerta npm...

EUVD-2025-121589

Malicious code in style-loader-node-config-charon-izar npm...

EUVD-2025-111404

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs npm...

Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-bootstrap-cosmos-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab306ab768aef4e01bcc7b04a30047de7b94dde56979b39615ba7937b0b938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123213

Malicious code in proxima-commitlint-config-angular-pyxis-fork npm...

EUVD-2025-115084

Malicious code in config-gridsome-rehype-io npm...

EUVD-2025-115070

Malicious code in config-sails-repository-prompts npm...

EUVD-2025-121983

Malicious code in sirius-config-levels-umbriel npm...

EUVD-2025-114617

Malicious code in deimos-gatsby-config-xanthus npm...

Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...