MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141758 Malicious code in dotenv-safe-lint-standard-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96ce93bc5896847055a774b8ee4747daf6ed0538e96b9ffb3a4bcc8c1f03366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37067

Malicious code in jira-lint npm...

Malicious code in jira-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...

MAL-2025-49226 Malicious code in jira-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b162bfbb866437258b70101e3c788048ca508578aacbbdd1341c7713e2ce08 The package jira-lint was found to contain malicious code...

Malicious Package

Overview redux-lint-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2021-1073

Malware in sbrugna...

EUVD-2021-15614

Malware in sbrugna...

EUVD-2022-2243

Malicious code in bioql PyPI...

EUVD-2022-5620

Malicious code in bioql PyPI...

EUVD-2025-15407

Malicious code in bioql PyPI...

EUVD-2022-1944

Malicious code in bioql PyPI...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)

The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...

Malicious code in lint-staged-aquarius-relay-npm (npm)

The package lint-staged-aquarius-relay-npm was found to contain malicious code...

Malicious code in kastra-entanglement-lint-staged-wormhole (npm)

The package kastra-entanglement-lint-staged-wormhole was found to contain malicious code...

MAL-2025-44167 Malicious code in eslint-config-nebula-hapi-aurora (npm)

The package eslint-config-nebula-hapi-aurora was found to contain malicious code...

Malicious code in husky-xenos-lint-staged-dotenv (npm)

The package husky-xenos-lint-staged-dotenv was found to contain malicious code...

Malicious code in @zalastax/nolb-lint (npm)

The package @zalastax/nolb-lint was found to contain malicious code...