MAL-2025-148549 Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142243 Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142539 Malicious code in fomalhaut-eslint-plugin-winston-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d03227b869816ab9e7250cc83babbb89ae78174016545e7cb653f430969e667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-36773

Malicious code in eslint-plugin-cli-microsoft365 npm...

Malicious code in eslint-plugin-cli-microsoft365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48998 Malicious code in eslint-plugin-cli-microsoft365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview eslint-plugin-custom-eslint-rules is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

EUVD-2025-36778

Malicious code in eslint-plugin-custom-eslint-rules npm...

Malicious code in eslint-plugin-custom-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48999 Malicious code in eslint-plugin-custom-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48840 Malicious code in eslint-plugin-ethereumjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview eslint-plugin-react-discord is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview eslint-plugin-custom-msal-w is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in eslint-plugin-react-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862a652a5e78f22218ea31a4ff588865d928d6ffaab7d8be046b8430511288c0 Any computer that has this package installed or running should be considered...

MAL-2025-48362 Malicious code in eslint-plugin-react-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862a652a5e78f22218ea31a4ff588865d928d6ffaab7d8be046b8430511288c0 Any computer that has this package installed or running should be considered...

Malicious code in eslint-plugin-custom-msal-w (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e152a7488bd0f7129231f38c46e92a0a1163247faac591a269193b2b08231736 Any computer that has this package installed or running should be considered...