EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-123591

Malicious code in polaris-commitlint-config-angular-gemini-mdx npm...

EUVD-2025-116339

Malicious code in avior-commitlint-config-angular-cypress-quark npm...

EUVD-2025-122169

Malicious code in sedna-barnard-bunyan-commitlint-config-angular npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

EUVD-2025-123213

Malicious code in proxima-commitlint-config-angular-pyxis-fork npm...

Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122578

Malicious code in rest-commitlint-config-angular-ophiuchus-luna npm...

EUVD-2025-123829

Malicious code in perseus-kronos-figures-commitlint-config-angular npm...

EUVD-2025-114020

Malicious code in epimetheus-apollo-commitlint-config-angular-relay npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-112990

Malicious code in gulp-quark-neptune-commitlint-config-angular npm...

EUVD-2025-124542

Malicious code in neptune-request-hexo-commitlint-config-angular npm...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm)

The package cordelia-quasar-gravity-commitlint-config-angular was found to contain malicious code...

Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm)

The package antimatter-commitlint-config-angular-archaeoastronomy-lint was found to contain malicious code...