EUVD-2025-179033

Malicious code in eslint-plugin-semantic-release-chalk-fusion npm...

EUVD-2025-179036

Malicious code in eslint-plugin-mutation-geomorphology-cladistics npm...

EUVD-2025-178467

Malicious code in hyperion-postgres-eslint-config-warp npm...

EUVD-2025-180260

Malicious code in async-public-eslint-plugin-loop npm...

EUVD-2025-179029

Malicious code in eslint-webdriverio-mutation-sedna npm...

EUVD-2025-176999

Malicious code in prompts-xanthus-blitz-eslint npm...

EUVD-2025-179051

Malicious code in eslint-commitizen-firebase-upgrade npm...

Malicious code in auriga-eslint-halley-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0bd6588a9174fc25cd49a2b2bb3fb8a2d06d58e3da4b7775a007a7ce02483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177717

Malicious code in mysql-spectron-webdriver-primatology-eslint-plugin npm...

EUVD-2025-178148

Malicious code in leda-jsonp-dependencies-eslint-config npm...

EUVD-2025-177090

Malicious code in postcss-mongodb-astrometry-eslint-config npm...

EUVD-2025-175971

Malicious code in tethys-deimos-spinner-eslint-config npm...

EUVD-2025-178971

Malicious code in exoplanetology-eslint-config-eslint-plugin-elara npm...

Malicious code in eslint-loop-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c329a482c68f847b5078bc7c6cd99a0df89ac2ee483147aa5ed8810a29dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177312

Malicious code in parsec-oauth-jsonp-eslint-config npm...

EUVD-2025-178286

Malicious code in javascript-async-enceladus-eslint-plugin npm...

EUVD-2025-178710

Malicious code in glaciology-nconf-eslint-plugin-farout npm...

Malicious code in quasarjet-magellan-eslint-config-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ff58fdde504d3d42a123d86f3b1ad2572ed8426a28e1b81fd8de74c23b13d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175831

Malicious code in umbriel-eslint-config-kardashevscale-jwt npm...

EUVD-2025-176581

Malicious code in run-script-yaml-fomalhaut-eslint-config npm...