223 matches found
EUVD-2025-111241
Malicious code in metalsmith-dagda-ganymede-semantic-release npm...
EUVD-2025-111180
Malicious code in meteor-semantic-release-inquirer-pegasus npm...
EUVD-2025-122224
Malicious code in schema-semantic-release-andromeda-celeste npm...
EUVD-2025-122094
Malicious code in semantic-release-inquirer-nestjs-publish npm...
MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121524
Malicious code in supervisor-semantic-release-vortex-jest npm...
Malicious code in centaurus-websockets-enceladus-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123404
Malicious code in prettier-stylelint-semantic-release-concurrently-vega npm...
EUVD-2025-123512
Malicious code in postcss-loader-semantic-release-slides-buffer npm...
EUVD-2025-122097
Malicious code in semantic-release-google-warp-vuetify npm...
EUVD-2025-120787
Malicious code in version-mongoose-cors-semantic-release npm...
EUVD-2025-112060
Malicious code in jupiter-chromedriver-semantic-release-chai npm...
EUVD-2025-122087
Malicious code in semantic-release-sails-webdriver-mocha-npm npm...
EUVD-2025-124539
Malicious code in neptune-stop-semantic-release-nestjs npm...
EUVD-2025-115373
Malicious code in charon-semantic-release-vuepress-centaurus npm...
EUVD-2025-121771
Malicious code in spica-ceres-semantic-release-janus npm...
Malicious code in semantic-release-inquirer-nestjs-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...