MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142229 Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115698

Malicious code in carina-eslint-plugin-async-mui npm...

EUVD-2025-114409

Malicious code in dotenv-antares-eslint-plugin-sedna npm...

EUVD-2025-123050

Malicious code in pyxis-config-eslint-plugin-exec npm...

EUVD-2025-121379

Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan npm...

EUVD-2025-113737

Malicious code in express-electron-builder-eslint-plugin-firebase npm...

EUVD-2025-112857

Malicious code in helmet-mui-eslint-plugin-webdriver-mocha npm...

EUVD-2025-113889

Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 npm...

EUVD-2025-116767

Malicious code in alphard-pino-quasar-eslint-plugin npm...

EUVD-2025-113868

Malicious code in eslint-plugin-spectron-csv-aether npm...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120438

Malicious code in winston-eslint-plugin-quark-sagitta npm...

EUVD-2025-121671

Malicious code in standard-eslint-plugin-mutation-standard npm...

Malicious code in test-eslint-plugin-proxima-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91bd7cf7b7e85933a0a0d2e82c784d5cf58f651a742a1cb85717e7284c1d4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-eslint-plugin-procyon-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6096faa5e10b2c385f98c2600967ae8fad4414fce255c69a7c8ae1ad0d863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112418

Malicious code in io-eslint-plugin-yonder-unuk npm...

EUVD-2025-113866

Malicious code in eslint-plugin-thuban-firebase-centauri npm...

EUVD-2025-123894

Malicious code in pegasus-eslint-plugin-postcss-iota npm...