MAL-2025-142539 Malicious code in fomalhaut-eslint-plugin-winston-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d03227b869816ab9e7250cc83babbb89ae78174016545e7cb653f430969e667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145263 Malicious code in mysql-sqlite-eslint-plugin-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec435a93019b858cbb763aad9940adcfe0490b0100a4c6be9a8be1ec65a3c24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113867

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard npm...

EUVD-2025-115698

Malicious code in carina-eslint-plugin-async-mui npm...

EUVD-2025-120179

Malicious code in xo-nova-thuban-eslint-plugin npm...

EUVD-2025-121036

Malicious code in ultra-eslint-plugin-levels-titan npm...

EUVD-2025-124815

Malicious code in module-eslint-plugin-cypress-nodemon npm...

Malicious code in winston-eslint-plugin-quark-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706839edf2b666a4f9ca7c829230ca1869eada44401afc05d260eec76ec24e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112857

Malicious code in helmet-mui-eslint-plugin-webdriver-mocha npm...

EUVD-2025-115115

Malicious code in commitlint-miranda-express-eslint-plugin npm...

EUVD-2025-115563

Malicious code in centaurus-eslint-plugin-hapi-electron-builder npm...

EUVD-2025-120780

Malicious code in virgo-backend-hermes-eslint-plugin npm...

EUVD-2025-113873

Malicious code in eslint-plugin-process-sails-update npm...

EUVD-2025-113872

Malicious code in eslint-plugin-public-forever-pegasus npm...

EUVD-2025-113938

Malicious code in eris-eslint-plugin-zenobia-lint-staged npm...

EUVD-2025-113864

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk npm...

EUVD-2025-123209

Malicious code in proxima-eslint-plugin-xanadu-jupiter npm...

Malicious code in eslint-plugin-request-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ef0d07a987d27e4c659a7944026bc057f89b21342a892da7330296ce732087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...