EUVD-2025-111658

Malicious code in lint-staged-fork-writable-flare npm...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115906

Malicious code in build-wolf-kastra-lint-staged npm...

Malicious code in lint-staged-ganymede-titan-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac0691969c683ccf6abff93d005c2db42f31a9073ea430084172a3c7938c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144469 Malicious code in lint-staged-ultra-vega-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05255d72e8ae6e33299cdcb4fffa857c7f8faa9e68782e51c45a4fd800b36a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139257 Malicious code in airbnb-karma-lynx-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05e1e5527ea26a244d15e0aa5a7e08fb9668682cb3c6840370ec54b8aafc6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111937

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144176 Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142172 Malicious code in eris-eslint-plugin-zenobia-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfab6b0fb87953abbe4e024121bba676664db6493f779c6cd06e152a3238389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121254

Malicious code in titan-chai-heka-lint-staged npm...

Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121209

Malicious code in toml-node-sass-lint-staged-andromeda npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115665

Malicious code in carpo-ganymede-yakutsk-lint-staged npm...

EUVD-2025-112848

Malicious code in helmet-spectron-ophiuchus-lint-staged npm...

EUVD-2025-111666

Malicious code in lint-staged-carpo-webdriver-mocha-start npm...

Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...