EUVD-2025-116728

Malicious code in andromeda-config-eslint-alphard npm...

EUVD-2025-115603

Malicious code in celeste-config-selenium-package npm...

EUVD-2025-124414

Malicious code in node-config-flare-elektra-xenos npm...

EUVD-2025-115150

Malicious code in commitlint-config-angular-bulma-nextjs-aether npm...

EUVD-2025-124542

Malicious code in neptune-request-hexo-commitlint-config-angular npm...

Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115943

Malicious code in buffer-materialize-config-subscription npm...

EUVD-2025-115134

Malicious code in commitlint-config-angular-vuepress-csv-hermes npm...

EUVD-2025-121968

Malicious code in sirius-impulse-node-config-spica npm...

EUVD-2025-115078

Malicious code in config-lyra-solis-meissa npm...

EUVD-2025-123727

Malicious code in phoenix-flare-config-altair npm...

EUVD-2025-112134

Malicious code in json-passport-eslint-config-chalk npm...

EUVD-2025-123351

Malicious code in process-spinner-node-config-meteor npm...

EUVD-2025-120122

Malicious code in yildun-config-electron-ophiuchus npm...

EUVD-2025-115968

Malicious code in browserify-node-config-impulse-scripts npm...

EUVD-2025-111194

Malicious code in meteor-node-config-hugo-fomalhaut npm...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

EUVD-2025-120199

Malicious code in xml-perseus-hugo-eslint-config npm...

MAL-2025-140358 Malicious code in canopus-config-karma-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...