EUVD-2025-115454

Malicious code in chalk-procyon-nebula-lint npm...

EUVD-2025-111641

Malicious code in lint-standard-dependencies-meteor npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-111674

Malicious code in lint-ini-carpo-aldebaran npm...

Malicious code in markdown-pdf-callisto-lint-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111640

Malicious code in lint-toml-janus-cross-env npm...

EUVD-2025-124755

Malicious code in mongoose-prompts-spectron-lint-staged npm...

EUVD-2025-120301

Malicious code in xanthus-lint-staged-blaze-cassini npm...

Malicious code in deimos-lint-mini-css-extract-plugin-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c02587c8bfdfb4a5cb0891d69ef15f034064df3bdd7fc4dbc4172fe0544af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115382

Malicious code in charon-lint-envconfig-firebase npm...

EUVD-2025-115742

Malicious code in canopus-lint-altair-cross-env npm...

EUVD-2025-122830

Malicious code in readable-sqlite-lint-staged-ora npm...

EUVD-2025-111428

Malicious code in markdown-pdf-callisto-lint-standard npm...

EUVD-2025-111672

Malicious code in lint-jupiter-prompts-version npm...

EUVD-2025-122221

Malicious code in schema-zenobia-lint-staged-postcss npm...

EUVD-2025-111900

Malicious code in kronos-apollo-changelog-eslint-plugin npm...

EUVD-2025-114610

Malicious code in deimos-lint-mini-css-extract-plugin-kastra npm...

EUVD-2025-111652

Malicious code in lint-staged-mutation-orbit-triton npm...

EUVD-2025-112973

Malicious code in halley-eslint-plugin-google-phoenix npm...

Malicious code in koa-cassini-eclipse-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd24fb361200188d4b0c5bd6616f98a3460bd0844e006c879e4840212da4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...