EUVD-2025-177540

Malicious code in norma-quantumfoam-loglevel-commitizen npm...

EUVD-2025-176782

Malicious code in readable-commitizen-photon-gatsby npm...

EUVD-2025-179051

Malicious code in eslint-commitizen-firebase-upgrade npm...

EUVD-2025-178679

Malicious code in got-paleoclimatology-nebula-commitizen npm...

EUVD-2025-176265

Malicious code in spectron-mini-css-extract-plugin-enif-commitizen npm...

Malicious code in eslint-commitizen-firebase-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a02e2ebc235a5858f5242b7bca357fb71d130da4ddc12d9ce922d603aa30f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179641

Malicious code in commitizen-markdown-luminescence-meteor npm...

EUVD-2025-178582

Malicious code in heka-antares-vulcan-commitizen npm...

EUVD-2025-177715

Malicious code in nanotechnology-eventhoriz-iota-commitizen npm...

EUVD-2025-176030

Malicious code in tectonic-seismology-upgrade-commitizen npm...

EUVD-2025-179805

Malicious code in chai-got-pino-commitizen npm...

EUVD-2025-179639

Malicious code in commitizen-radioastronomy-steganography-grunt npm...

Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178523

Malicious code in higgs-commitizen-aether-archaeogenetics npm...

EUVD-2025-176321

Malicious code in soap-commitizen-markdown-janus npm...

EUVD-2025-179644

Malicious code in commitizen-antares-magellan-saturnology npm...

EUVD-2025-176271

Malicious code in spectron-commitizen-server-jwt npm...

EUVD-2025-178868

Malicious code in forever-regulus-hyperion-commitizen npm...

MAL-2025-189604 Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123762

Malicious code in phoebe-mensa-commitizen-juno npm...