EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-113909

Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius npm...

EUVD-2025-122578

Malicious code in rest-commitlint-config-angular-ophiuchus-luna npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-112453

Malicious code in inquirer-sails-bulma-commitlint-config-angular npm...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115137

Malicious code in commitlint-config-angular-tethys-gridsome-terser npm...

EUVD-2025-116195

Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier npm...

EUVD-2025-115090

Malicious code in config-commitlint-config-angular-foundation-spica npm...

EUVD-2025-124064

Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...

EUVD-2025-122702

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint npm...

EUVD-2025-114176

Malicious code in electron-virgo-izar-commitlint-config-angular npm...

EUVD-2025-112836

Malicious code in hercules-commitlint-config-angular-neptune-blaze npm...

EUVD-2025-123213

Malicious code in proxima-commitlint-config-angular-pyxis-fork npm...

EUVD-2025-115139

Malicious code in commitlint-config-angular-norma-gravity-yakutsk npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115140

Malicious code in commitlint-config-angular-meissa-eleventy-spica npm...

EUVD-2025-114240

Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager npm...

EUVD-2025-113420

Malicious code in framework-quasar-spawn-commitlint-config-angular npm...