EUVD-2025-123016

Malicious code in quantum-karma-eslint-plugin-javascript npm...

EUVD-2025-123209

Malicious code in proxima-eslint-plugin-xanadu-jupiter npm...

MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120641

Malicious code in wasat-eslint-plugin-figures-tethys npm...

Malicious code in eslint-plugin-public-forever-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113880

Malicious code in eslint-plugin-dynamo-axios-lint npm...

EUVD-2025-113306

Malicious code in ganymede-kronos-oauth-eslint-plugin npm...

EUVD-2025-113876

Malicious code in eslint-plugin-nightwatch-javascript-restart npm...

EUVD-2025-113870

Malicious code in eslint-plugin-request-indus-magellan npm...

EUVD-2025-114085

Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config npm...

EUVD-2025-113896

Malicious code in eslint-configstore-transform-zenith npm...

EUVD-2025-121411

Malicious code in terser-eslint-apollo-hercules npm...

EUVD-2025-113072

Malicious code in gridsome-eslint-plugin-neptune-quito npm...

Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-library-carina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf33dfb38061f04102f930ca05f066db39305ec29335d77c56c418bba3bda7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113857

Malicious code in eslint-transform-terser-oberon npm...

Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114743

Malicious code in cygnus-eslint-changelog-sedna npm...

EUVD-2025-115494

Malicious code in chakra-ui-eslint-toml-react-bootstrap npm...

Malicious code in terser-eslint-config-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99029eef74460dc4ac507dfa0acda2cb632328c787ed90485c02bab83dcb2f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...