518 matches found
MAL-2025-148549 Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142241 Malicious code in eslint-plugin-sadr-commitizen-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2458790d8a94f3e458db7c76cae20f1c9bc1d93ef09dbcc916bf4b8947c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149288 Malicious code in wasat-eslint-plugin-figures-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35bbcd2f127f59b93516a803fe75b50e0406a0599ba86a9e3133cd9e8c83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140544 Malicious code in centaurus-eslint-plugin-hapi-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130b5389646555fa44a99b1c80554506f5c28249e9c60be6b4adaa5e09e1d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142239 Malicious code in eslint-plugin-quito-wezen-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beeae429e6485aebd709417772e4bd48dc3a1ea5b5d9bbfbe191a75285b72635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142240 Malicious code in eslint-plugin-request-indus-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ef0d07a987d27e4c659a7944026bc057f89b21342a892da7330296ce732087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142235 Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142229 Malicious code in eslint-plugin-despina-xanthus-ultra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in test-eslint-plugin-proxima-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91bd7cf7b7e85933a0a0d2e82c784d5cf58f651a742a1cb85717e7284c1d4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113883
Malicious code in eslint-plugin-carina-telesto-got npm...
EUVD-2025-113525
Malicious code in fork-eslint-plugin-procyon-fusion npm...
EUVD-2025-113889
Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 npm...
EUVD-2025-113881
Malicious code in eslint-plugin-despina-xanthus-ultra npm...
EUVD-2025-123164
Malicious code in public-eslint-plugin-blitz-init npm...