EUVD-2025-121089

Malicious code in typeorm-chalk-eslint-config-geckodriver npm...

Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112714

Malicious code in hugo-rimraf-eslint-nightwatch npm...

Malicious code in standard-eslint-plugin-mutation-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480790047255d5eacfffe50b3ebe2488ebafeea3734d7906fded36546b7ed765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114889

Malicious code in cosmos-sirius-elektra-eslint npm...

EUVD-2025-114173

Malicious code in elektra-aldebaran-eslint-leda npm...

Malicious code in chakra-ui-neptune-eslint-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113938

Malicious code in eris-eslint-plugin-zenobia-lint-staged npm...

EUVD-2025-120216

Malicious code in xerxes-public-eslint-plugin-quantum npm...

EUVD-2025-122681

Malicious code in remark-astro-forever-eslint npm...

MAL-2025-140178 Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149473 Malicious code in wezen-webdriver-manager-eslint-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d08eab0498ea6d4742fd2273a6ca42ba843338b52356b14b91e8ff07b822c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142199 Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142212 Malicious code in eslint-config-thuban-repository-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c074994c161bdf7cb79253e0cc659149af99d893068ef5bab57b54a45a15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142539 Malicious code in fomalhaut-eslint-plugin-winston-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d03227b869816ab9e7250cc83babbb89ae78174016545e7cb653f430969e667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143441 Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141366 Malicious code in cygnus-eslint-changelog-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd0a5eb751aa64e3f278a17e2fd11e36e71dc42534e16ded7a9fdb74443fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142204 Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...