226 matches found
EUVD-2025-124818
Malicious code in module-commitizen-ursa-protractor npm...
EUVD-2025-112723
Malicious code in hugo-io-commitizen-shelljs npm...
EUVD-2025-115170
Malicious code in commitizen-postcss-phoebe-jest npm...
EUVD-2025-114906
Malicious code in cosmos-commitizen-quito-orbit npm...
Malicious code in commitizen-start-radiant-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114685
Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...
EUVD-2025-115164
Malicious code in commitizen-style-loader-ursa-hugo npm...
EUVD-2025-112933
Malicious code in hapi-commitizen-update-semantic-release npm...
EUVD-2025-120981
Malicious code in umbriel-style-loader-commitizen-spectron npm...
EUVD-2025-115166
Malicious code in commitizen-spectron-webdriver-resolvers-sirius npm...
Malicious code in zephyr-nightwatch-eridanus-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696d7c4d5b4385fef4a7e6589e7493e1486988935c857bb2a6a4f54bc2e5828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121738
Malicious code in spinner-castor-commitizen-dependencies npm...
EUVD-2025-124393
Malicious code in node-sass-bellatrix-commitizen-yaml npm...
EUVD-2025-116601
Malicious code in apollo-commitizen-koa-farout npm...
EUVD-2025-120372
Malicious code in wolf-polaris-zenith-commitizen npm...
EUVD-2025-112792
Malicious code in hermes-publish-socketio-commitizen npm...
EUVD-2025-122086
Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...
EUVD-2025-111233
Malicious code in metalsmith-materialize-gacrux-commitizen npm...
Malicious code in helios-quito-chai-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...