EUVD-2025-120098

Malicious code in yonder-commitlint-config-angular-nightmare-gemini npm...

EUVD-2025-121644

Malicious code in start-sirius-commitlint-config-angular-cluster npm...

EUVD-2025-115138

Malicious code in commitlint-config-angular-pegasus-xenos-npm npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-111280

Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha npm...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

EUVD-2025-123249

Malicious code in prompts-playwright-cli-commitlint-config-angular npm...

EUVD-2025-115184

Malicious code in commitizen-await-commitlint-config-angular-chalk npm...

EUVD-2025-113502

Malicious code in fornax-centauri-ceres-commitlint-config-angular npm...

EUVD-2025-115137

Malicious code in commitlint-config-angular-tethys-gridsome-terser npm...

EUVD-2025-114934

Malicious code in cosmiconfig-cassini-commitlint-config-angular-equinox npm...

EUVD-2025-123591

Malicious code in polaris-commitlint-config-angular-gemini-mdx npm...

EUVD-2025-111143

Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

EUVD-2025-124274

Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv npm...

EUVD-2025-115145

Malicious code in commitlint-config-angular-ganymede-nodejs-mysql npm...

EUVD-2025-115142

Malicious code in commitlint-config-angular-kinetic-sync-babel npm...

MAL-2025-140975 Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...