EUVD-2025-114607

Malicious code in deimos-ophiuchus-eslint-plugin-start npm...

EUVD-2025-113865

Malicious code in eslint-plugin-tool-rest-firebase npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-113878

Malicious code in eslint-plugin-galaxy-xml-canopus npm...

Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111895

Malicious code in kronos-gridsome-eslint-plugin-forever npm...

MAL-2025-142171 Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142229 Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149473 Malicious code in wezen-webdriver-manager-eslint-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d08eab0498ea6d4742fd2273a6ca42ba843338b52356b14b91e8ff07b822c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121036

Malicious code in ultra-eslint-plugin-levels-titan npm...

EUVD-2025-112013

Malicious code in karma-deneb-eslint-plugin-public npm...

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120502

Malicious code in websockets-solis-eslint-plugin-non-blocking npm...

EUVD-2025-122909

Malicious code in radiant-development-eslint-plugin-nodejs npm...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113873

Malicious code in eslint-plugin-process-sails-update npm...

EUVD-2025-112907

Malicious code in heka-express-axios-eslint-plugin npm...

Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145263 Malicious code in mysql-sqlite-eslint-plugin-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec435a93019b858cbb763aad9940adcfe0490b0100a4c6be9a8be1ec65a3c24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...