EUVD-2025-115823

Malicious code in cache-semantic-release-uninstall-hapi npm...

EUVD-2025-116317

Malicious code in avior-semantic-release-prettier-cz-conventional-changelog npm...

EUVD-2025-121447

Malicious code in taurus-semantic-release-auth0-castor npm...

EUVD-2025-124539

Malicious code in neptune-stop-semantic-release-nestjs npm...

EUVD-2025-124779

Malicious code in mongodb-semantic-release-elektra-delphinus npm...

EUVD-2025-120787

Malicious code in version-mongoose-cors-semantic-release npm...

EUVD-2025-123152

Malicious code in public-supervisor-semantic-release-rate-limiter npm...

EUVD-2025-121771

Malicious code in spica-ceres-semantic-release-janus npm...

EUVD-2025-120831

Malicious code in vega-semantic-release-vuepress-venus npm...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-123840

Malicious code in perseus-elektra-spawn-semantic-release npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-122095

Malicious code in semantic-release-impulse-taurus-standard npm...

EUVD-2025-111241

Malicious code in metalsmith-dagda-ganymede-semantic-release npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

Malicious code in semantic-release-native-server-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...