EUVD-2025-120301

Malicious code in xanthus-lint-staged-blaze-cassini npm...

EUVD-2025-116456

Malicious code in atlas-jwt-antares-lint npm...

EUVD-2025-111649

Malicious code in lint-staged-sirius-xo-juno npm...

EUVD-2025-122859

Malicious code in react-bootstrap-lint-alphard-ursa npm...

EUVD-2025-113714

Malicious code in express-xanadu-husky-lint-staged npm...

EUVD-2025-111639

Malicious code in lint-winston-browserify-airbnb npm...

Malicious code in airbnb-capella-lint-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b80181a2fddf012d48e5ae7bde1413806b7a1f47e0c32b51dd8cd7c05f2c632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123049

Malicious code in pyxis-cors-lint-staged-auriga npm...

EUVD-2025-124744

Malicious code in morgan-eslint-config-dione-lint npm...

EUVD-2025-122221

Malicious code in schema-zenobia-lint-staged-postcss npm...

EUVD-2025-111678

Malicious code in lint-duplex-bellatrix-deimos npm...

EUVD-2025-112229

Malicious code in javascript-nodejs-lint-staged-build npm...

EUVD-2025-120665

Malicious code in warp-cassini-bellatrix-lint-staged npm...

EUVD-2025-111656

Malicious code in lint-staged-gridsome-less-loader-standard npm...

EUVD-2025-112693

Malicious code in husky-global-lint-staged-callback npm...

EUVD-2025-111428

Malicious code in markdown-pdf-callisto-lint-standard npm...

EUVD-2025-113346

Malicious code in gacrux-ganymede-fomalhaut-lint-staged npm...

EUVD-2025-111655

Malicious code in lint-staged-library-fork-perseus npm...

Malicious code in koa-cassini-eclipse-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd24fb361200188d4b0c5bd6616f98a3460bd0844e006c879e4840212da4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...