EUVD-2025-111233

Malicious code in metalsmith-materialize-gacrux-commitizen npm...

EUVD-2025-115175

Malicious code in commitizen-jekyll-antares-umbra npm...

EUVD-2025-115913

Malicious code in build-sails-postgres-commitizen npm...

EUVD-2025-121738

Malicious code in spinner-castor-commitizen-dependencies npm...

EUVD-2025-112796

Malicious code in hermes-enceladus-commitizen-kaus npm...

Malicious code in carpo-tool-query-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d85076a23d978552389bda01ad653402407b5c31a5709662db6c7e2f7bf4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115290

Malicious code in cli-zephyr-pegasus-commitizen npm...

EUVD-2025-112792

Malicious code in hermes-publish-socketio-commitizen npm...

Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115170

Malicious code in commitizen-postcss-phoebe-jest npm...

EUVD-2025-115167

Malicious code in commitizen-spawn-csv-auriga npm...

EUVD-2025-115974

Malicious code in browserify-commitizen-sagitta-dagda npm...

EUVD-2025-116601

Malicious code in apollo-commitizen-koa-farout npm...

EUVD-2025-112041

Malicious code in jwt-figures-ora-commitizen npm...

EUVD-2025-115164

Malicious code in commitizen-style-loader-ursa-hugo npm...

EUVD-2025-120718

Malicious code in vuetify-ini-framework-commitizen npm...

EUVD-2025-113356

Malicious code in gacrux-commitizen-uninstall-slides npm...

Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114685

Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...