EUVD-2025-115159

Malicious code in commitizen-vuepress-slides-public npm...

EUVD-2025-121224

Malicious code in toml-commitizen-mocha-epimetheus npm...

Malicious code in module-commitizen-ursa-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f26d53b29b1bf3883da585fa2b4f95ac153556379e35b88240b0e694943de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142756 Malicious code in gacrux-commitizen-uninstall-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26219600ef7d96d48a10ca9e239a52acae6ed0fe396c10a6afb98d447e0b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140130 Malicious code in browserify-commitizen-sagitta-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6c3f73722ff3d1197d3a7d5ab09db87224a83c4ed886cae2739b4d76100fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-io-commitizen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14422502a986da3f3e8a3e58d27382f380fdb312eedf3d04e62baee24a4dcd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120099

Malicious code in yonder-commitizen-chromedriver-janus npm...

Malicious code in postcss-loader-quito-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ff2bf6dc026adfb7fcf087d65584c298b75dd1842c5baff878381350cd0ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115162

Malicious code in commitizen-transform-algol-betelgeuse npm...

EUVD-2025-111731

Malicious code in library-package-chalk-commitizen npm...

EUVD-2025-111711

Malicious code in link-commitizen-warp-nightmare npm...

EUVD-2025-111695

Malicious code in link-passport-prettier-plugin-markdown-commitizen npm...

EUVD-2025-111677

Malicious code in lint-fomalhaut-commitizen-pino npm...

EUVD-2025-111582

Malicious code in loop-sails-commitizen-resolvers npm...

EUVD-2025-111233

Malicious code in metalsmith-materialize-gacrux-commitizen npm...

EUVD-2025-112471

Malicious code in inquirer-cli-hermes-commitizen npm...

Malicious code in carpo-tool-query-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d85076a23d978552389bda01ad653402407b5c31a5709662db6c7e2f7bf4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-cache-spawn-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0ef65d7296351d71c06f748a304a64aa2e5ce87ebd5092bc4ab6d793f938de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-fetch-leda-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad32909ada1383cfdbbe1faf4ff59ab81ad25641643f4c43649a502a9ae0e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-forever-kronos-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3e877871f76ba9e3d244d01fe8c0120005de9d90b3980e73de642d4dfc890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...