EUVD-2025-114313

Malicious code in draco-spectron-webdriver-nashira-eslint-plugin npm...

MAL-2025-148549 Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123699

Malicious code in pino-loopback-uninstall-eslint-plugin npm...

MAL-2025-142227 Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123016

Malicious code in quantum-karma-eslint-plugin-javascript npm...

EUVD-2025-123209

Malicious code in proxima-eslint-plugin-xanadu-jupiter npm...

MAL-2025-143310 Malicious code in hermes-configstore-eslint-plugin-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3bdc04af03af34bd15360b61efcf854164c41b3154458686a6e8af98453a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-cli-microsoft365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36773

Malicious code in eslint-plugin-cli-microsoft365 npm...

MAL-2025-48998 Malicious code in eslint-plugin-cli-microsoft365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36778

Malicious code in eslint-plugin-custom-eslint-rules npm...

Malicious Package

Overview eslint-plugin-custom-eslint-rules is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2025-48999 Malicious code in eslint-plugin-custom-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-custom-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48840 Malicious code in eslint-plugin-ethereumjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview eslint-plugin-react-discord is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview eslint-plugin-custom-msal-w is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in eslint-plugin-react-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862a652a5e78f22218ea31a4ff588865d928d6ffaab7d8be046b8430511288c0 Any computer that has this package installed or running should be considered...

MAL-2025-48362 Malicious code in eslint-plugin-react-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862a652a5e78f22218ea31a4ff588865d928d6ffaab7d8be046b8430511288c0 Any computer that has this package installed or running should be considered...

MAL-2025-48361 Malicious code in eslint-plugin-custom-msal-w (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e152a7488bd0f7129231f38c46e92a0a1163247faac591a269193b2b08231736 Any computer that has this package installed or running should be considered...