EUVD-2025-123591

Malicious code in polaris-commitlint-config-angular-gemini-mdx npm...

EUVD-2025-116195

Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-114020

Malicious code in epimetheus-apollo-commitlint-config-angular-relay npm...

EUVD-2025-124542

Malicious code in neptune-request-hexo-commitlint-config-angular npm...

EUVD-2025-115134

Malicious code in commitlint-config-angular-vuepress-csv-hermes npm...

EUVD-2025-112990

Malicious code in gulp-quark-neptune-commitlint-config-angular npm...

EUVD-2025-122578

Malicious code in rest-commitlint-config-angular-ophiuchus-luna npm...

EUVD-2025-112836

Malicious code in hercules-commitlint-config-angular-neptune-blaze npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

EUVD-2025-114955

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular npm...

EUVD-2025-113024

Malicious code in grus-chai-library-commitlint-config-angular npm...

EUVD-2025-115135

Malicious code in commitlint-config-angular-ultra-bellatrix-mdx npm...

Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6402077653de7905967491c9e1aa4a9a1662661767e24f36434c2d419174f1b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112036

Malicious code in jwt-json-commitlint-config-angular-quark npm...

EUVD-2025-114693

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay npm...

EUVD-2025-115184

Malicious code in commitizen-await-commitlint-config-angular-chalk npm...

EUVD-2025-112602

Malicious code in ignite-commitlint-config-angular-iota-corvus npm...

EUVD-2025-114995

Malicious code in cors-antares-commitlint-config-angular-iota npm...

MAL-2025-146532 Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...