EUVD-2025-122104

Malicious code in semantic-release-apollo-pyxis-changelog npm...

EUVD-2025-115622

Malicious code in castor-hyperion-semantic-release-fusion npm...

EUVD-2025-122100

Malicious code in semantic-release-cordelia-quark-update npm...

Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-update-kronos-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da546cb3c2bf0dd517acd0ea1b421c16b51e5572a631825d7770db5b7ac38f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-version-schema-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122088

Malicious code in semantic-release-rimraf-polaris-sync npm...

EUVD-2025-124358

Malicious code in nodejs-eris-izar-semantic-release npm...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

Malicious code in vega-semantic-release-vuepress-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123266

Malicious code in promise-xenos-semantic-release-grus npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122090

Malicious code in semantic-release-pavo-winston-xo npm...

EUVD-2025-112060

Malicious code in jupiter-chromedriver-semantic-release-chai npm...

EUVD-2025-120255

Malicious code in xenos-framework-semantic-release-query npm...

EUVD-2025-124612

Malicious code in nconf-commitizen-semantic-release-testcafe npm...

EUVD-2025-120276

Malicious code in xenon-oberon-semantic-release-mysql npm...

Malicious code in semantic-release-apollo-pyxis-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...