EUVD-2025-111695

Malicious code in link-passport-prettier-plugin-markdown-commitizen npm...

Malicious code in zephyr-nightwatch-eridanus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696d7c4d5b4385fef4a7e6589e7493e1486988935c857bb2a6a4f54bc2e5828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122333

Malicious code in sagitta-commitizen-xanthus-cache npm...

EUVD-2025-122648

Malicious code in repository-meissa-commitizen-andromeda npm...

EUVD-2025-123339

Malicious code in procyon-commitizen-transform-celeste npm...

EUVD-2025-115160

Malicious code in commitizen-ursa-figures-winston npm...

EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-115179

Malicious code in commitizen-dotenv-safe-tool-virgo npm...

EUVD-2025-124818

Malicious code in module-commitizen-ursa-protractor npm...

Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111233

Malicious code in metalsmith-materialize-gacrux-commitizen npm...

EUVD-2025-122373

Malicious code in run-script-nconf-hermes-commitizen npm...

EUVD-2025-124183

Malicious code in oauth-yonder-galaxy-commitizen npm...

EUVD-2025-115171

Malicious code in commitizen-nestjs-got-ultra npm...

EUVD-2025-120041

Malicious code in zephyr-nightwatch-eridanus-commitizen npm...

EUVD-2025-121738

Malicious code in spinner-castor-commitizen-dependencies npm...

EUVD-2025-115181

Malicious code in commitizen-concurrently-fomalhaut-orbit npm...

EUVD-2025-112041

Malicious code in jwt-figures-ora-commitizen npm...

EUVD-2025-115170

Malicious code in commitizen-postcss-phoebe-jest npm...

MAL-2025-143316 Malicious code in hermes-enceladus-commitizen-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f766d5ff337f93d816e6e76ebadb6d46154771716ce960f02b416fb7c476ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...