EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

EUVD-2025-177795

Malicious code in mocha-epimetheus-zenith-commitlint-config-angular npm...

EUVD-2025-178531

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...

EUVD-2025-178840

Malicious code in foundation-transport-xenobiology-commitlint-config-angular npm...

EUVD-2025-176662

Malicious code in rest-nova-nightwatch-commitlint-config-angular npm...

EUVD-2025-113024

Malicious code in grus-chai-library-commitlint-config-angular npm...

EUVD-2025-111243

Malicious code in metalsmith-celeste-commitlint-config-angular-gacrux npm...

EUVD-2025-122169

Malicious code in sedna-barnard-bunyan-commitlint-config-angular npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

EUVD-2025-112990

Malicious code in gulp-quark-neptune-commitlint-config-angular npm...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115145

Malicious code in commitlint-config-angular-ganymede-nodejs-mysql npm...

EUVD-2025-112453

Malicious code in inquirer-sails-bulma-commitlint-config-angular npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-123829

Malicious code in perseus-kronos-figures-commitlint-config-angular npm...

EUVD-2025-122578

Malicious code in rest-commitlint-config-angular-ophiuchus-luna npm...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...