EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-115170

Malicious code in commitizen-postcss-phoebe-jest npm...

EUVD-2025-114685

Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...

EUVD-2025-115179

Malicious code in commitizen-dotenv-safe-tool-virgo npm...

EUVD-2025-114906

Malicious code in cosmos-commitizen-quito-orbit npm...

EUVD-2025-122648

Malicious code in repository-meissa-commitizen-andromeda npm...

EUVD-2025-115175

Malicious code in commitizen-jekyll-antares-umbra npm...

EUVD-2025-111695

Malicious code in link-passport-prettier-plugin-markdown-commitizen npm...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115171

Malicious code in commitizen-nestjs-got-ultra npm...

EUVD-2025-111851

Malicious code in leda-commitizen-markdown-ariel npm...

EUVD-2025-112792

Malicious code in hermes-publish-socketio-commitizen npm...

EUVD-2025-123515

Malicious code in postcss-loader-quito-iota-commitizen npm...

EUVD-2025-115181

Malicious code in commitizen-concurrently-fomalhaut-orbit npm...

EUVD-2025-116498

Malicious code in astro-ganymede-commitizen-cypress npm...

EUVD-2025-124393

Malicious code in node-sass-bellatrix-commitizen-yaml npm...

EUVD-2025-115160

Malicious code in commitizen-ursa-figures-winston npm...

EUVD-2025-115164

Malicious code in commitizen-style-loader-ursa-hugo npm...

EUVD-2025-124818

Malicious code in module-commitizen-ursa-protractor npm...

Malicious code in zephyr-nightwatch-eridanus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696d7c4d5b4385fef4a7e6589e7493e1486988935c857bb2a6a4f54bc2e5828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...