EUVD-2025-115157

Malicious code in commitizen-zenobia-event-pegasus npm...

EUVD-2025-121027

Malicious code in ultra-nightwatch-commitizen-javascript npm...

Malicious code in nextjs-phoebe-commitizen-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c7087b7b287470476889ddc426136442abdab2d013c904a1f9e9d558f3cbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-nconf-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115183

Malicious code in commitizen-cache-spawn-vega npm...

EUVD-2025-115169

Malicious code in commitizen-rimraf-figures-phoebe npm...

EUVD-2025-115162

Malicious code in commitizen-transform-algol-betelgeuse npm...

Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111677

Malicious code in lint-fomalhaut-commitizen-pino npm...

EUVD-2025-121762

Malicious code in spica-json-umbra-commitizen npm...

EUVD-2025-120372

Malicious code in wolf-polaris-zenith-commitizen npm...

EUVD-2025-121738

Malicious code in spinner-castor-commitizen-dependencies npm...

EUVD-2025-115181

Malicious code in commitizen-concurrently-fomalhaut-orbit npm...

EUVD-2025-115180

Malicious code in commitizen-csv-impulse-wasat npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

Malicious code in dactyl-schema-commitizen-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7746f3e8f99af9c8c47f87b8f62362e5608f4873351d72567cbf9894e781f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122089

Malicious code in semantic-release-process-alphard-commitizen npm...

EUVD-2025-123707

Malicious code in pino-cypress-nova-commitizen npm...