EUVD-2025-113892

Malicious code in eslint-fomalhaut-lint-staged-meteor npm...

Malicious code in levels-telesto-eslint-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1fd5512ebe9aed61c95cdb2a46351fb6ae9e0896e25cb5cff408c9dbb7ef3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139959 Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149715 Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142192 Malicious code in eslint-config-betelgeuse-leda-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d1950ff7371cd89e9f79ac4f6a18270b302d3dd6f9dca88f95a2cafd66fb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142204 Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144859 Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140178 Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141796 Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142233 Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142198 Malicious code in eslint-config-event-convict-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f446aaf24a37aca04db5c7b3b7a5018dd7160c69c812dba273d37e7bfc1a947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143695 Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111404

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs npm...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142243 Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123965

Malicious code in parcel-eslint-config-castor-eleventy npm...

Malicious code in capella-virgo-neptune-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74955c1944f7289abb9767df8625bff89308a3ba20a2ce78410c61dc25ad03ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...