MAL-2025-146339 Malicious code in polaris-eslint-bunyan-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075381e94b557c068496fea2af11a3e089cbe86e465828871771f905a71de889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113899

Malicious code in eslint-config-supervisor-figures-sails npm...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114743

Malicious code in cygnus-eslint-changelog-sedna npm...

EUVD-2025-113880

Malicious code in eslint-plugin-dynamo-axios-lint npm...

EUVD-2025-121010

Malicious code in umbra-eslint-config-elektra-postgres npm...

EUVD-2025-124309

Malicious code in non-blocking-kastra-eslint-config-babel npm...

Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111880

Malicious code in lacerta-backend-soap-eslint-config npm...

EUVD-2025-113854

Malicious code in eslint-websockets-standard-enif npm...

Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113855

Malicious code in eslint-webpack-celeste-betelgeuse npm...

EUVD-2025-124528

Malicious code in nestjs-dotenv-kinetic-eslint-plugin npm...

EUVD-2025-115543

Malicious code in ceres-eridanus-eslint-config-triton npm...

EUVD-2025-113072

Malicious code in gridsome-eslint-plugin-neptune-quito npm...

EUVD-2025-120641

Malicious code in wasat-eslint-plugin-figures-tethys npm...

EUVD-2025-111160

Malicious code in middleware-eslint-pavo-got npm...

EUVD-2025-113248

Malicious code in geckodriver-forever-eslint-config-pino-pretty npm...

EUVD-2025-113914

Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin npm...

Malicious code in terser-eslint-config-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99029eef74460dc4ac507dfa0acda2cb632328c787ed90485c02bab83dcb2f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...