EUVD-2025-114486

Malicious code in development-kastra-lint-staged-jsonp npm...

EUVD-2025-123459

Malicious code in prettier-cosmiconfig-testcafe-lint-staged npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

Malicious code in markdown-pdf-callisto-lint-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122748

Malicious code in rehype-lint-staged-electron-builder-readable npm...

EUVD-2025-120575

Malicious code in webdriver-mocha-lint-redis-graphql npm...

EUVD-2025-111132

Malicious code in mini-css-extract-plugin-npm-lint-lacerta npm...

EUVD-2025-120078

Malicious code in zenith-lint-local-google npm...

EUVD-2025-116052

Malicious code in blitz-lint-odin-cache npm...

EUVD-2025-111652

Malicious code in lint-staged-mutation-orbit-triton npm...

EUVD-2025-122951

Malicious code in query-lint-staged-library-jasmine npm...

Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111656

Malicious code in lint-staged-gridsome-less-loader-standard npm...

EUVD-2025-111644

Malicious code in lint-staged-virgo-hyperion-tool npm...

EUVD-2025-114610

Malicious code in deimos-lint-mini-css-extract-plugin-kastra npm...

EUVD-2025-113542

Malicious code in forever-lint-carina-readable npm...

EUVD-2025-121650

Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...

EUVD-2025-111658

Malicious code in lint-staged-fork-writable-flare npm...

EUVD-2025-120906

Malicious code in upgrade-nextjs-lint-buffer npm...

Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...