Malicious code in lint-auth0-joviology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc97a55208b7ece6a83f42b44139024e81c21bdc1b43050810b785e84bf514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entanglement-pino-lint-innercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae11fcd1d834d151b4d2a4fabd47aea93d666ed6b8a38c767ddbcfe35e8ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179121

Malicious code in entanglement-pino-lint-innercore npm...

EUVD-2025-179650

Malicious code in command-dotenv-safe-oberon-lint-staged npm...

EUVD-2025-177910

Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...

EUVD-2025-180195

Malicious code in avior-nconf-docusaurus-lint-staged npm...

EUVD-2025-176169

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...

EUVD-2025-178080

Malicious code in lint-antares-luna-nashira npm...

EUVD-2025-179712

Malicious code in cli-webdriver-manager-lint-staged-auth npm...

Malicious code in lint-staged-gemini-aquarius-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc40fa5df9bcceec113021575335b079fa5851a7bb404c582e9c8ace2a5b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179511

Malicious code in cressida-vortex-lint-staged-blueshift npm...

EUVD-2025-179034

Malicious code in eslint-plugin-pyxis-library-style-loader npm...

EUVD-2025-177826

Malicious code in mira-apex-lint-bellatrix npm...

EUVD-2025-178071

Malicious code in lint-remark-meteor-neptune npm...

MAL-2025-187314 Malicious code in helios-centaurus-juno-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929260b67680ed0507a691726e1f4f84a5fb3205b6e1217e1356966bbbfa20e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187806 Malicious code in lint-janus-juno-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c4d24d6c0937c0a916af5b388852eb2c5e7fb318480dba1e23ab03c3047296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185521 Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ff83f7a5d6fc103e22f1e1f849ed6afdf59b479690cc50d9b75086d617db1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187311 Malicious code in heliophysics-aurora-lint-staged-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3146d8b6e52b168ae00047b32f06d4bcb6748de549b64b41b2bfb73c6bd4abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187811 Malicious code in lint-remark-meteor-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7f5550866ab3d3fd105f2aae894229da93014e2557b2fd328e2703ba4f12a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189515 Malicious code in sirius-darkmatter-lint-staged-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac68762e33089807478b221c74a906d070cef10fe0699ea1243ff9090ef6d249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...