EUVD-2025-115324

Malicious code in chromedriver-xml-pegasus-changelog npm...

EUVD-2025-115252

Malicious code in colors-nodemon-changelog-helmet npm...

EUVD-2025-115074

Malicious code in config-promise-weywot-cz-conventional-changelog npm...

EUVD-2025-114996

Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog npm...

EUVD-2025-116460

Malicious code in atlas-changelog-nebula-kinetic npm...

EUVD-2025-116421

Malicious code in auriga-less-cz-conventional-changelog-axios npm...

EUVD-2025-116338

Malicious code in avior-cz-conventional-changelog-shelljs-zenobia npm...

EUVD-2025-116317

Malicious code in avior-semantic-release-prettier-cz-conventional-changelog npm...

EUVD-2025-116254

Malicious code in babel-changelog-janus-webdriver-manager npm...

EUVD-2025-116169

Malicious code in bellatrix-cz-conventional-changelog-firebase-version npm...

EUVD-2025-116025

Malicious code in bootes-docusaurus-europa-changelog npm...

EUVD-2025-115942

Malicious code in buffer-mutation-changelog-karma npm...

EUVD-2025-115841

Malicious code in cache-centauri-cz-conventional-changelog-upgrade npm...

EUVD-2025-115837

Malicious code in cache-cz-conventional-changelog-meissa-express npm...

MAL-2025-143852 Malicious code in jasmine-fomalhaut-changelog-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa38a95490450c4b15fd8fc796ac0472049559c3449ac79dbe54b1e6a3e178f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149048 Malicious code in ursa-changelog-prompts-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7e4316ad2e5cd206f165f7146db81b01de8cdf3a67430488a7af608beb130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115437

Malicious code in changelog-hydra-hugo-ini npm...

MAL-2025-140673 Malicious code in changelog-library-morgan-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55450bda6649eced55284a2e5cb1d17294f7d951afd2040f864d9af5c7287948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...