Malicious code in eslint-plugin-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-1380

Malicious code in eslint-plugin-supertest npm...

MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199913

Malicious code in eslint-plugin-react-hooks-published npm...

MAL-2025-191346 Malicious code in @voiceflow/eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cd8ae1f7314aac775c05ede8c705af3cba9d1a6513674495b86e0fa1f822b4 The package @voiceflow/eslint-plugin was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @zapier/eslint-plugin-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198735

Malicious code in @zapier/eslint-plugin-zapier npm...

EUVD-2025-179032

Malicious code in eslint-plugin-weywot-bootes-cypress npm...

EUVD-2025-178549

Malicious code in hercules-css-loader-restart-eslint-plugin npm...

EUVD-2025-179040

Malicious code in eslint-plugin-eslint-sails-membrane npm...

EUVD-2025-177876

Malicious code in metalsmith-eslint-plugin-proxima-update npm...

MAL-2025-188285 Malicious code in nightwatch-global-subduction-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db5dca0a960c4affb7ee077ac8b2613cfe86d64f6224a89a259c25d733fcdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186844 Malicious code in eslint-plugin-gacrux-wolf-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c4c2c488bc3934c41186d1bf456e7754924dbf514664faccb83c81e00532a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f76b381638ad18356b8c8d18b10785d541bf3b50f7d3ed0032bd37f205212b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179039

Malicious code in eslint-plugin-fornax-auth-dactyl npm...

EUVD-2025-180502

Malicious code in adonis-cosmos-eslint-plugin-izar npm...

Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72910fde647545178f4ccecb0cd7f8485357f83fd546d2c8329012ecdc9f34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176609

Malicious code in rollup-neptune-webdriver-manager-eslint-plugin npm...

EUVD-2025-178710

Malicious code in glaciology-nconf-eslint-plugin-farout npm...