EUVD-2025-114313

Malicious code in draco-spectron-webdriver-nashira-eslint-plugin npm...

EUVD-2025-123239

Malicious code in protractor-eslint-plugin-nestjs-altair npm...

EUVD-2025-124605

Malicious code in nconf-eslint-plugin-postgres-hydra npm...

EUVD-2025-112907

Malicious code in heka-express-axios-eslint-plugin npm...

MAL-2025-139790 Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145263 Malicious code in mysql-sqlite-eslint-plugin-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec435a93019b858cbb763aad9940adcfe0490b0100a4c6be9a8be1ec65a3c24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113880

Malicious code in eslint-plugin-dynamo-axios-lint npm...

EUVD-2025-120128

Malicious code in yaml-publish-dependencies-eslint-plugin npm...

EUVD-2025-113871

Malicious code in eslint-plugin-quito-wezen-npm npm...

EUVD-2025-121379

Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan npm...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111266

Malicious code in mensa-eslint-plugin-schema-corvus npm...

MAL-2025-142247 Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de003ad5beff2831f64a6b34d25377bdabc07ac8babbabbe04176801ae9094b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123894

Malicious code in pegasus-eslint-plugin-postcss-iota npm...

MAL-2025-142539 Malicious code in fomalhaut-eslint-plugin-winston-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d03227b869816ab9e7250cc83babbb89ae78174016545e7cb653f430969e667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...