EUVD-2025-113072

Malicious code in gridsome-eslint-plugin-neptune-quito npm...

EUVD-2025-120641

Malicious code in wasat-eslint-plugin-figures-tethys npm...

EUVD-2025-124605

Malicious code in nconf-eslint-plugin-postgres-hydra npm...

EUVD-2025-112907

Malicious code in heka-express-axios-eslint-plugin npm...

EUVD-2025-113870

Malicious code in eslint-plugin-request-indus-magellan npm...

EUVD-2025-113863

Malicious code in eslint-plugin-zephyr-xenos-betelgeuse npm...

EUVD-2025-116767

Malicious code in alphard-pino-quasar-eslint-plugin npm...

EUVD-2025-124406

Malicious code in node-config-miranda-cosmiconfig-eslint-plugin npm...

EUVD-2025-123239

Malicious code in protractor-eslint-plugin-nestjs-altair npm...

EUVD-2025-111266

Malicious code in mensa-eslint-plugin-schema-corvus npm...

MAL-2025-142247 Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de003ad5beff2831f64a6b34d25377bdabc07ac8babbabbe04176801ae9094b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116312

Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin npm...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142539 Malicious code in fomalhaut-eslint-plugin-winston-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d03227b869816ab9e7250cc83babbb89ae78174016545e7cb653f430969e667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139790 Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...