@directus/release-notes-generator (>=2.0.2 <=3.0.0-rc.0), @kcconfigs/commitlint (>=0.1.0-beta.0 <=0.2.0) +71 more potentially affected by CVE-2025-69262 via @pnpm/npm-conf (>=3.0.0 <=3.0.1)

@pnpm/npm-conf NPM version =3.0.0, =2.0.2, =0.1.0-beta.0, =1000.3.5, =1000.0.4, =1000.0.4, =1000.0.4, =1000.1.0, =1002.1.1, =1008.0.2, =1016.0.0 and more Source cves: CVE-2025-69262 Source advisory: SNYK:JS-PNPMNPMCONF-14897556...

EUVD-2025-199423

Malicious code in @voiceflow/commitlint-config npm...

Malicious code in @voiceflow/commitlint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318a598c3e523953b57c870305c3d1237a290a253f3d69dd9f24bf6ba079d6e The package @voiceflow/commitlint-config was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-177383

Malicious code in paleobotany-commitlint-config-angular-ultra-nebula npm...

EUVD-2025-177322

Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics npm...

EUVD-2025-179630

Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...

EUVD-2025-177006

Malicious code in prompts-commitlint-canopus-karma npm...

EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

Malicious code in commitlint-config-angular-sadr-cluster-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a368a0670a1239eb372db7a1d0764026369adcca6b15380695639d0c6b5379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179626

Malicious code in commitlint-resolvers-procyon-pm2 npm...

EUVD-2025-179625

Malicious code in commitlint-slides-octans-resolvers npm...

EUVD-2025-179958

Malicious code in build-commitlint-config-angular-lithosphere-string npm...

EUVD-2025-179629

Malicious code in commitlint-config-angular-sadr-cluster-mira npm...

EUVD-2025-178613

Malicious code in halley-pm2-semantic-ui-commitlint-config-angular npm...

EUVD-2025-176223

Malicious code in standard-thuban-commitlint-config-angular-got npm...

Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176998

Malicious code in prosthetics-commitlint-astrobiology-io npm...

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a99b354cc0e80cf5bfdc8e125674477abcb0f262775850a536241b2b90e9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176169

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...

Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a105ecd8ce1e73138202d04dda63b4869c363dc694a29aa66527412831360b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...