EUVD-2025-112840

Malicious code in hercules-betelgeuse-build-release-it npm...

EUVD-2025-122702

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint npm...

EUVD-2025-114913

Malicious code in cosmiconfig-release-it-xenon-pyxis npm...

EUVD-2025-115204

Malicious code in command-geckodriver-nodemon-release-it npm...

EUVD-2025-124208

Malicious code in nuxtjs-release-it-reveal-md-iota npm...

EUVD-2025-111456

Malicious code in magellan-reveal-md-release-it-mocha npm...

EUVD-2025-120900

Malicious code in upgrade-release-it-delphinus-colors npm...

EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

EUVD-2025-122692

Malicious code in release-it-phoenix-node-sass-dependencies npm...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

EUVD-2025-116857

Malicious code in aether-vulcan-nightwatch-release-it npm...

EUVD-2025-112432

Malicious code in install-release-it-celeste-xanadu npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120478

Malicious code in wezen-capella-release-it-atlas npm...

EUVD-2025-122685

Malicious code in release-it-toml-transport-carpo npm...

EUVD-2025-113469

Malicious code in fornax-phoebe-release-it-ganymede npm...

EUVD-2025-113082

Malicious code in gravity-release-it-grus-hermes npm...

EUVD-2025-113312

Malicious code in ganymede-got-got-release-it npm...

Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...