EUVD-2025-111503

Malicious code in lyra-kastra-nodemon-cz-conventional-changelog npm...

EUVD-2025-111318

Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback npm...

EUVD-2025-111190

Malicious code in meteor-procyon-cz-conventional-changelog-less npm...

EUVD-2025-111128

Malicious code in mini-css-extract-plugin-pino-changelog-adonis npm...

EUVD-2025-111108

Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager npm...

EUVD-2025-112466

Malicious code in inquirer-frontend-changelog-lynx npm...

EUVD-2025-112261

Malicious code in jasmine-fomalhaut-changelog-supervisor npm...

EUVD-2025-112156

Malicious code in jovian-pipe-pegasus-cz-conventional-changelog npm...

EUVD-2025-112095

Malicious code in juno-blaze-rehype-cz-conventional-changelog npm...

EUVD-2025-112045

Malicious code in jwt-alphard-cz-conventional-changelog-registry npm...

EUVD-2025-111900

Malicious code in kronos-apollo-changelog-eslint-plugin npm...

EUVD-2025-111878

Malicious code in lacerta-configstore-cz-conventional-changelog-janus npm...

EUVD-2025-111868

Malicious code in lacerta-luna-writable-cz-conventional-changelog npm...

Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-concurrently-sync-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1d4255bab5218283efc53533fb42513bd2f9d95209efc16d5763e7e8f24ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-ignite-query-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6caeef7d23f9bf8806e1c40ef6efc54878973d26ebf8ee9c404dfc4b728787c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-library-morgan-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55450bda6649eced55284a2e5cb1d17294f7d951afd2040f864d9af5c7287948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...