6 matches found
Malicious Package
Overview hercules-forever-commitlint-publish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...
EUVD-2025-179627
Malicious code in commitlint-publish-fornax-prettier-stylelint npm...
MAL-2025-186255 Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d0a6efe42d239d3fb4ecfc887966e3ba7f79c8cde0ddd056df53c7460a5ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d0a6efe42d239d3fb4ecfc887966e3ba7f79c8cde0ddd056df53c7460a5ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hercules-forever-commitlint-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9803406d1325535701e09d7d4d218c17a8cd1c1e737f8f79ae74503e89943b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...