MAL-2025-185386 Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114903

Malicious code in cosmos-eslint-transform-ini npm...

MAL-2025-17626 Malicious code in cosmos-eslint-baryon-troposphere (npm)

The package cosmos-eslint-baryon-troposphere was found to contain malicious code...