EUVD-2025-113892

Malicious code in eslint-fomalhaut-lint-staged-meteor npm...

EUVD-2025-111645

Malicious code in lint-staged-ultra-vega-polaris npm...

EUVD-2025-114486

Malicious code in development-kastra-lint-staged-jsonp npm...

EUVD-2025-123085

Malicious code in pulsar-nodemon-lint-staged-prettier npm...

EUVD-2025-121254

Malicious code in titan-chai-heka-lint-staged npm...

EUVD-2025-115357

Malicious code in child-process-lint-staged-less-style-loader npm...

EUVD-2025-120309

Malicious code in xanthus-electron-builder-chakra-ui-lint-staged npm...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124785

Malicious code in mongodb-materialize-lint-staged-aether npm...

Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111650

Malicious code in lint-staged-pyxis-webdriver-manager-solis npm...

EUVD-2025-123459

Malicious code in prettier-cosmiconfig-testcafe-lint-staged npm...

Malicious code in koa-cassini-eclipse-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd24fb361200188d4b0c5bd6616f98a3460bd0844e006c879e4840212da4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144469 Malicious code in lint-staged-ultra-vega-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05255d72e8ae6e33299cdcb4fffa857c7f8faa9e68782e51c45a4fd800b36a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113372

Malicious code in fusion-lint-staged-chromedriver-aquarius npm...

EUVD-2025-122830

Malicious code in readable-sqlite-lint-staged-ora npm...

Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111661

Malicious code in lint-staged-despina-async-xml npm...

EUVD-2025-122951

Malicious code in query-lint-staged-library-jasmine npm...