EUVD-2025-112848

Malicious code in helmet-spectron-ophiuchus-lint-staged npm...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

EUVD-2025-120078

Malicious code in zenith-lint-local-google npm...

EUVD-2025-113095

Malicious code in gravity-babel-lint-spectron npm...

EUVD-2025-111666

Malicious code in lint-staged-carpo-webdriver-mocha-start npm...

EUVD-2025-121209

Malicious code in toml-node-sass-lint-staged-andromeda npm...

EUVD-2025-122952

Malicious code in query-lint-dione-cross-env npm...

Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112260

Malicious code in jasmine-gatsby-lint-meissa npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

EUVD-2025-113729

Malicious code in express-lint-jsonp-nightwatch npm...

EUVD-2025-116255

Malicious code in babel-bellatrix-lint-staged-json npm...

EUVD-2025-114482

Malicious code in development-polaris-lint-staged-procyon npm...

EUVD-2025-111671

Malicious code in lint-pavo-meissa-aquarius npm...

EUVD-2025-120582

Malicious code in webdriver-mocha-exec-juno-lint-staged npm...

EUVD-2025-120913

Malicious code in upgrade-hermes-jovian-lint npm...

EUVD-2025-111680

Malicious code in lint-centaurus-vuetify-dotenv-parse-variables npm...

Malicious code in query-lint-dione-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cce3fbcf9f2f080f5429ac6cdfde30ab50eab69ed68d84c2d663dae5bbb661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111132

Malicious code in mini-css-extract-plugin-npm-lint-lacerta npm...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...