752 matches found
MAL-2025-140620 Malicious code in chakra-ui-lint-webpack-yildun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141509 Malicious code in delphinus-altair-farout-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dec0a7142346b708feacb4f333b65f902175868929901f20759b12f56e8da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140277 Malicious code in cache-npm-terser-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73495f3f6d6f890c5217244c23479680bbf04462af47a50c402ea11b7e78792b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142381 Malicious code in express-lint-jsonp-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6a62b53d4890622b1b329a17d46a7064aadbb7f0dff51a99f4f8fb05f02970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139646 Malicious code in atlas-jwt-antares-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98c8e4329229fbcc553c2ab25a7908722a9425806a82c7c46aeb6def65c0371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142218 Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143095 Malicious code in grus-nashira-lint-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d055b3ce56e60be0bfa4969d7cc1a5e2ffb608a61cdf2cbdfd339fefa11ed75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140364 Malicious code in canopus-lint-altair-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142544 Malicious code in fomalhaut-library-carina-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf33dfb38061f04102f930ca05f066db39305ec29335d77c56c418bba3bda7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in taurus-lint-andromeda-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aede6c54725dc663745ea8702cae95b5545630e7dc96af364471615c2b017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-global-lint-staged-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113567
Malicious code in fomalhaut-lint-kastra-gacrux npm...
EUVD-2025-122268
Malicious code in sails-nightwatch-lint-fornax npm...
EUVD-2025-116845
Malicious code in airbnb-karma-lynx-lint-staged npm...
Malicious code in lint-staged-ganymede-titan-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac0691969c683ccf6abff93d005c2db42f31a9073ea430084172a3c7938c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111223
Malicious code in metalsmith-vulcan-lint-staged-acamar npm...