MAL-2025-142396 Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112203

Malicious code in jekyll-nodemon-lint-enceladus npm...

MAL-2025-144468 Malicious code in lint-staged-terser-chakra-ui-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555aa83a6752f98aa45cf50f95aab2be0bb0f5156ba979089b0af5a64a3f030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112260

Malicious code in jasmine-gatsby-lint-meissa npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

MAL-2025-144446 Malicious code in lint-staged-auth0-blitz-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143017 Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139550 Malicious code in aquarius-sedna-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e39ba57b7192f42133b9d75ca50578b733c485b36983ce205e871e9a2c23047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jira-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...

EUVD-2025-37067

Malicious code in jira-lint npm...

MAL-2025-49226 Malicious code in jira-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...

Malicious Package

Overview redux-lint-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2021-15614

Malware in sbrugna...

EUVD-2021-1073

Malware in sbrugna...

EUVD-2025-15407

Malicious code in bioql PyPI...

EUVD-2022-1944

Malicious code in bioql PyPI...

EUVD-2022-2243

Malicious code in bioql PyPI...

EUVD-2022-5620

Malicious code in bioql PyPI...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...