EUVD-2025-111789

Malicious code in less-loader-lint-staged-csv-local npm...

EUVD-2025-124785

Malicious code in mongodb-materialize-lint-staged-aether npm...

Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111667

Malicious code in lint-staged-blaze-concurrently-cordelia npm...

EUVD-2025-112260

Malicious code in jasmine-gatsby-lint-meissa npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111644

Malicious code in lint-staged-virgo-hyperion-tool npm...

EUVD-2025-114900

Malicious code in cosmos-metalsmith-lint-staged-tethys npm...

MAL-2025-143017 Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112203

Malicious code in jekyll-nodemon-lint-enceladus npm...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120582

Malicious code in webdriver-mocha-exec-juno-lint-staged npm...

EUVD-2025-111416

Malicious code in markdown-pdf-ophiuchus-lint-dynamo npm...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142396 Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...