Malicious code in @voiceflow/npm-package-json-lint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb13f449b9f8582e57b2b30103359ccd3efcbde9b172f827a481af246122211 The package @voiceflow/npm-package-json-lint-config was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199230

Malicious code in lint-staged-imagemin npm...

Malicious code in lint-staged-imagemin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cfbe33b97d4e3997d348c9532c834715e755ea1d28a6b30f2276209d4f45db The package lint-staged-imagemin was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-175540

Malicious code in winston-lint-staged-ganymede-parcel npm...

EUVD-2025-177826

Malicious code in mira-apex-lint-bellatrix npm...

EUVD-2025-179511

Malicious code in cressida-vortex-lint-staged-blueshift npm...

EUVD-2025-176287

Malicious code in solis-chakra-ui-comet-lint npm...

EUVD-2025-178071

Malicious code in lint-remark-meteor-neptune npm...

EUVD-2025-178080

Malicious code in lint-antares-luna-nashira npm...

EUVD-2025-180023

Malicious code in blitz-materialize-link-lint-staged npm...

EUVD-2025-177327

Malicious code in parallax-speleology-cosmicray-lint npm...

EUVD-2025-178068

Malicious code in lint-staged-javascript-jwt-zooarchaeology npm...

Malicious code in lint-auth0-joviology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc97a55208b7ece6a83f42b44139024e81c21bdc1b43050810b785e84bf514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178069

Malicious code in lint-staged-inquirer-transport-hawkingradiation npm...

Malicious code in lint-staged-gemini-aquarius-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc40fa5df9bcceec113021575335b079fa5851a7bb404c582e9c8ace2a5b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176169

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...

EUVD-2025-180195

Malicious code in avior-nconf-docusaurus-lint-staged npm...

EUVD-2025-179121

Malicious code in entanglement-pino-lint-innercore npm...

EUVD-2025-177857

Malicious code in meteor-hadron-hermes-lint npm...

EUVD-2025-179650

Malicious code in command-dotenv-safe-oberon-lint-staged npm...