Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120582

Malicious code in webdriver-mocha-exec-juno-lint-staged npm...

Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115665

Malicious code in carpo-ganymede-yakutsk-lint-staged npm...

EUVD-2025-112248

Malicious code in jasmine-quito-lint-vulcan npm...

EUVD-2025-113095

Malicious code in gravity-babel-lint-spectron npm...

Malicious code in spica-lint-solis-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0bc74a9bf11f5ae9f2d2951d34d018a956cf3d25f4ddd5b84f47c2335f0a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

EUVD-2025-113001

Malicious code in gulp-blitz-radiant-lint npm...

EUVD-2025-111654

Malicious code in lint-staged-link-promise-iota npm...

Malicious code in query-lint-dione-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cce3fbcf9f2f080f5429ac6cdfde30ab50eab69ed68d84c2d663dae5bbb661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111132

Malicious code in mini-css-extract-plugin-npm-lint-lacerta npm...

EUVD-2025-112260

Malicious code in jasmine-gatsby-lint-meissa npm...

EUVD-2025-111666

Malicious code in lint-staged-carpo-webdriver-mocha-start npm...

EUVD-2025-120078

Malicious code in zenith-lint-local-google npm...

EUVD-2025-112848

Malicious code in helmet-spectron-ophiuchus-lint-staged npm...

EUVD-2025-111659

Malicious code in lint-staged-eslint-mensa-development npm...

Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...