MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140973 Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c226c4b1a3a0f8193958d600960e0a77134c920f899336f377da7683130fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139959 Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116703

Malicious code in antares-config-mutation-jekyll npm...

EUVD-2025-121845

Malicious code in solis-node-config-antares-levels npm...

EUVD-2025-123024

Malicious code in quantum-commitlint-config-angular-event-firebase npm...

Malicious code in commitlint-config-angular-apollo-sequelize-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c3f23943a372761b3922807be26f6d0d6aa6f29d881e122916b5201148a69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115525

Malicious code in chai-antares-gravity-eslint-config npm...

EUVD-2025-114944

Malicious code in corvus-puppeteer-eslint-config-mysql npm...

EUVD-2025-115084

Malicious code in config-gridsome-rehype-io npm...

EUVD-2025-115943

Malicious code in buffer-materialize-config-subscription npm...

Malicious code in fomalhaut-library-carina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf33dfb38061f04102f930ca05f066db39305ec29335d77c56c418bba3bda7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-config-csv-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f85e5bc2c4f2c2668a1ada2fef47ed7c28b32fffaa259ed1920654dd56ad43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124416

Malicious code in node-config-elektra-europa-algol npm...

EUVD-2025-121471

Malicious code in tailwindcss-superagent-eslint-config-eleventy npm...

EUVD-2025-120712

Malicious code in vuetify-node-config-cressida-slidev npm...

MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...