EUVD-2025-116000

Malicious code in bootstrap-event-figures-eslint-config npm...

EUVD-2025-123582

Malicious code in polaris-eslint-bunyan-pegasus npm...

Malicious code in eslint-gatsby-init-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-weywot-eslint-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a88c9b0d592888a18027b9fe9f06c0a29b5cf294a0a93073b116f95bcb23295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-eslint-changelog-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd0a5eb751aa64e3f278a17e2fd11e36e71dc42534e16ded7a9fdb74443fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113911

Malicious code in eslint-config-galaxy-postcss-loader-meissa npm...

EUVD-2025-113568

Malicious code in fomalhaut-library-carina-eslint-config npm...

Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142247 Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de003ad5beff2831f64a6b34d25377bdabc07ac8babbabbe04176801ae9094b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148051 Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140544 Malicious code in centaurus-eslint-plugin-hapi-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130b5389646555fa44a99b1c80554506f5c28249e9c60be6b4adaa5e09e1d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143695 Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142202 Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142215 Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149288 Malicious code in wasat-eslint-plugin-figures-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35bbcd2f127f59b93516a803fe75b50e0406a0599ba86a9e3133cd9e8c83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149325 Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148549 Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149231 Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...