MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115494

Malicious code in chakra-ui-eslint-toml-react-bootstrap npm...

EUVD-2025-112332

Malicious code in jabbah-leda-install-eslint-config npm...

EUVD-2025-121434

Malicious code in telesto-eslint-config-writable-rate-limiter npm...

EUVD-2025-122988

Malicious code in quark-process-schema-eslint-config npm...

EUVD-2025-123965

Malicious code in parcel-eslint-config-castor-eleventy npm...

Malicious code in eslint-config-cygnus-iota-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87ad769ec5476d02c6dbeed46e43ec25e7454715b7d55eeb428f0505d2483b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-eslint-event-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912e33dda74d1110c5a19a58e60ba349b4e47d20b5d79ea2ab9027ea4b4bacc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120439

Malicious code in winston-eslint-config-impulse-pino-pretty npm...

EUVD-2025-124039

Malicious code in ora-eslint-config-gemini-epimetheus npm...

MAL-2025-148518 Malicious code in terser-eslint-config-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99029eef74460dc4ac507dfa0acda2cb632328c787ed90485c02bab83dcb2f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146948 Malicious code in quasar-firebase-fornax-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2cbf84fe96d40effc4d6859f430e71ef58609ebb50c5eac96bc704a23190e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141366 Malicious code in cygnus-eslint-changelog-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd0a5eb751aa64e3f278a17e2fd11e36e71dc42534e16ded7a9fdb74443fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143780 Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148918 Malicious code in umbra-eslint-config-elektra-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a392c43ff4b5d26b28f817c91d48ec99b3a788b71d5993ba035c26f35df3e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147567 Malicious code in sadr-lyra-eclipse-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6704fa539bc2ce3eacd2e8de6aa93210afb60ab13b460ca98326284315da87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148051 Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-pipe-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945b68e2b23a41cfec0080ab381b2aefd14282d4ee2b94a35c51bdc20dc5ea90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...