223 matches found
EUVD-2025-112582
Malicious code in ignite-terser-semantic-release-exec npm...
Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123153
Malicious code in public-semantic-release-ophiuchus-jovian npm...
EUVD-2025-122443
Malicious code in rocket-semantic-release-spectron-polaris npm...
EUVD-2025-122089
Malicious code in semantic-release-process-alphard-commitizen npm...
EUVD-2025-120455
Malicious code in wezen-yakutsk-semantic-release-sirius npm...
MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116710
Malicious code in antares-auth-thuban-semantic-release npm...
EUVD-2025-122097
Malicious code in semantic-release-google-warp-vuetify npm...
EUVD-2025-122759
Malicious code in rehype-auth0-superagent-semantic-release npm...
EUVD-2025-113523
Malicious code in fork-gulp-bellatrix-semantic-release npm...
EUVD-2025-123512
Malicious code in postcss-loader-semantic-release-slides-buffer npm...