Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113869

Malicious code in eslint-plugin-sadr-commitizen-testcafe npm...

EUVD-2025-113874

Malicious code in eslint-plugin-phoebe-chariklo-pegasus npm...

EUVD-2025-115639

Malicious code in cassini-koa-nuxtjs-eslint-plugin npm...

EUVD-2025-113868

Malicious code in eslint-plugin-spectron-csv-aether npm...

EUVD-2025-113882

Malicious code in eslint-plugin-chai-lacerta-quasar npm...

Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113881

Malicious code in eslint-plugin-despina-xanthus-ultra npm...

EUVD-2025-112013

Malicious code in karma-deneb-eslint-plugin-public npm...

EUVD-2025-114607

Malicious code in deimos-ophiuchus-eslint-plugin-start npm...

EUVD-2025-113889

Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 npm...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112802

Malicious code in hermes-configstore-eslint-plugin-express npm...

EUVD-2025-121671

Malicious code in standard-eslint-plugin-mutation-standard npm...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eslint-plugin-proxima-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91bd7cf7b7e85933a0a0d2e82c784d5cf58f651a742a1cb85717e7284c1d4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143695 Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141796 Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149231 Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...