MAL-2025-140689 Malicious code in changelog-uninstall-mensa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd5b870f472128e8da885cd3ecd401a1e405b9ad6dfd3cd561535ee6b6707e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114937

Malicious code in cosmiconfig-avior-got-changelog npm...

EUVD-2025-122633

Malicious code in request-changelog-fomalhaut-public npm...

EUVD-2025-121168

Malicious code in transform-cz-conventional-changelog-electron-builder-tethys npm...

EUVD-2025-122470

Malicious code in rimraf-leda-proxima-cz-conventional-changelog npm...

EUVD-2025-122411

Malicious code in rollup-plugin-changelog-oberon-nextjs npm...

EUVD-2025-123765

Malicious code in phoebe-link-changelog-rollup-plugin npm...

EUVD-2025-121394

Malicious code in terser-private-ophiuchus-cz-conventional-changelog npm...

EUVD-2025-115444

Malicious code in changelog-bulma-meissa-cz-conventional-changelog npm...

EUVD-2025-114090

Malicious code in enceladus-astro-changelog-transform npm...

Malicious code in changelog-concurrently-sync-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1d4255bab5218283efc53533fb42513bd2f9d95209efc16d5763e7e8f24ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114494

Malicious code in development-changelog-publish-await npm...

Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114693

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay npm...

EUVD-2025-112754

Malicious code in html-webpack-plugin-csrf-link-changelog npm...

EUVD-2025-115433

Malicious code in changelog-markdown-pdf-rocket-hermes npm...

EUVD-2025-115423

Malicious code in changelog-slides-update-galaxy npm...

EUVD-2025-112775

Malicious code in hexo-changelog-sagitta-nconf npm...

EUVD-2025-122104

Malicious code in semantic-release-apollo-pyxis-changelog npm...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...