468 matches found
Malicious code in @ornikar/commitlint-config (npm)
npm/@ornikar/commitlint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
@directus/release-notes-generator (>=2.0.2 <=3.0.0-rc.0), @kcconfigs/commitlint (>=0.1.0-beta.0 <=0.2.0) +71 more potentially affected by CVE-2025-69262 via @pnpm/npm-conf (>=3.0.0 <=3.0.1)
@pnpm/npm-conf NPM version =3.0.0, =2.0.2, =0.1.0-beta.0, =1000.3.5, =1000.0.4, =1000.0.4, =1000.0.4, =1000.1.0, =1002.1.1, =1008.0.2, =1016.0.0 and more Source cves: CVE-2025-69262 Source advisory: SNYK:JS-PNPMNPMCONF-14897556...
Malicious code in @voiceflow/commitlint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318a598c3e523953b57c870305c3d1237a290a253f3d69dd9f24bf6ba079d6e The package @voiceflow/commitlint-config was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199423
Malicious code in @voiceflow/commitlint-config npm...
EUVD-2025-178969
Malicious code in exoplanetology-link-commitlint-prosthetics npm...
EUVD-2025-180113
Malicious code in bellatrix-mira-europa-commitlint npm...
EUVD-2025-179636
Malicious code in commitlint-chalk-eclipse-init npm...
EUVD-2025-177567
Malicious code in node-sass-commitlint-lynx-public npm...
EUVD-2025-179406
Malicious code in dagda-technocracy-commitlint-gacrux npm...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-178516
Malicious code in holography-commitlint-xml-unuk npm...
EUVD-2025-179628
Malicious code in commitlint-prosthetics-altair-magnetosphere npm...
Malicious code in commitlint-config-angular-sadr-cluster-mira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a368a0670a1239eb372db7a1d0764026369adcca6b15380695639d0c6b5379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177496
Malicious code in octans-buffer-commitlint-config-angular-puppeteer npm...
Malicious code in commitlint-resolvers-procyon-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175745
Malicious code in vega-commitlint-prosthetics-cressida npm...
EUVD-2025-177006
Malicious code in prompts-commitlint-canopus-karma npm...
Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d0a6efe42d239d3fb4ecfc887966e3ba7f79c8cde0ddd056df53c7460a5ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...