MAL-2025-140997 Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140980 Malicious code in commitlint-equinox-antares-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9f4821f0ee99f48562646d82f3f69fd8b7ec96aa2acfa28f0dfb34f662d098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115149

Malicious code in commitlint-config-angular-commitlint-config-angular-solis-cordelia npm...

MAL-2025-140970 Malicious code in commitlint-config-angular-pegasus-xenos-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c2051b79f90232311e21a77400bf1024281ed15567f280e1ecad0578366fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115147

Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm npm...

Malicious code in tectonic-kinetic-neuromorphic-commitlint (npm)

The package tectonic-kinetic-neuromorphic-commitlint was found to contain malicious code...

MAL-2025-34641 Malicious code in tectonic-kinetic-neuromorphic-commitlint (npm)

The package tectonic-kinetic-neuromorphic-commitlint was found to contain malicious code...

MAL-2025-17421 Malicious code in commitlint-mutation-tectonic-html-webpack-plugin (npm)

The package commitlint-mutation-tectonic-html-webpack-plugin was found to contain malicious code...

MAL-2025-16730 Malicious code in ceres-capella-babel-commitlint (npm)

The package ceres-capella-babel-commitlint was found to contain malicious code...

Malicious code in commitlint-config-angular-vega-ini-figures (npm)

The package commitlint-config-angular-vega-ini-figures was found to contain malicious code...