EUVD-2025-111283

Malicious code in meissa-semantic-ui-javascript-webdriver-mocha npm...

EUVD-2025-111241

Malicious code in metalsmith-dagda-ganymede-semantic-release npm...

EUVD-2025-111180

Malicious code in meteor-semantic-release-inquirer-pegasus npm...

EUVD-2025-111168

Malicious code in middleware-barnard-update-semantic-release npm...

EUVD-2025-111120

Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes npm...

EUVD-2025-112535

Malicious code in indus-standard-semantic-release-prompts npm...

EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

EUVD-2025-112478

Malicious code in init-writable-pino-semantic-release npm...

EUVD-2025-112391

Malicious code in iota-event-lynx-semantic-ui npm...

EUVD-2025-112323

Malicious code in jabbah-semantic-ui-development-development npm...

EUVD-2025-112282

Malicious code in janus-sagitta-arcturus-semantic-release npm...

EUVD-2025-112119

Malicious code in jsonp-configstore-janus-semantic-ui npm...

EUVD-2025-112105

Malicious code in jsonp-semantic-ui-indus-prettier npm...

EUVD-2025-112077

Malicious code in juno-quark-semantic-ui-eclipse npm...

EUVD-2025-112070

Malicious code in juno-wasat-npm-semantic-release npm...

EUVD-2025-112060

Malicious code in jupiter-chromedriver-semantic-release-chai npm...

EUVD-2025-112028

Malicious code in jwt-semantic-ui-nuxtjs-library npm...

Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...