324 matches found
MAL-2025-144448 Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116140
Malicious code in bellatrix-yildun-lint-staged-wolf npm...
EUVD-2025-111652
Malicious code in lint-staged-mutation-orbit-triton npm...
MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-staged-gridsome-less-loader-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a7c959df4560a355bfcd68e15080007566b2e99e74162477598c165db3994c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116419
Malicious code in auriga-lint-staged-janus-dotenv-safe npm...
EUVD-2025-115906
Malicious code in build-wolf-kastra-lint-staged npm...
Malicious code in lint-staged-ganymede-titan-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac0691969c683ccf6abff93d005c2db42f31a9073ea430084172a3c7938c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114605
Malicious code in deimos-rocket-lint-staged-cressida npm...
MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121868
Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...
EUVD-2025-111650
Malicious code in lint-staged-pyxis-webdriver-manager-solis npm...
EUVD-2025-111660
Malicious code in lint-staged-dotenv-safe-pulsar-restart npm...
EUVD-2025-111223
Malicious code in metalsmith-vulcan-lint-staged-acamar npm...
EUVD-2025-111937
Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...
EUVD-2025-111647
Malicious code in lint-staged-sync-global-test npm...
EUVD-2025-121650
Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin npm...
Malicious code in dactyl-lint-staged-achernar-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920ff036cda7e2b9c2eb43fd7bfae957bee9711f69f147fa6680168f03ce46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...