EUVD-2025-123829

Malicious code in perseus-kronos-figures-commitlint-config-angular npm...

EUVD-2025-113532

Malicious code in fork-carpo-commitlint-gulp npm...

EUVD-2025-111495

Malicious code in magellan-algol-websockets-commitlint npm...

Malicious code in procyon-commitlint-resolvers-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048db8edd78325c3e90ce4b067c733d39e621c74207f2eb16db312b39e5e4150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120736

Malicious code in vortex-vulcan-commitlint-config-angular-shelljs npm...

EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

EUVD-2025-115254

Malicious code in colors-magellan-commitlint-corvus npm...

EUVD-2025-121169

Malicious code in transform-commitlint-config-angular-procyon-canopus npm...

EUVD-2025-122482

Malicious code in rigel-spectron-webdriver-dotenv-commitlint npm...

EUVD-2025-122578

Malicious code in rest-commitlint-config-angular-ophiuchus-luna npm...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140978 Malicious code in commitlint-dependencies-upgrade-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5898bd5cbadcc7c16719896fe4bd6366ecedecc6cc744aedf81ca570c71865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145028 Malicious code in miranda-dactyl-nextjs-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d228656bd30c22129a576bd60a948554c53a18f40744adf0046d7568bc647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142613 Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-meteor-centauri-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa3663d895433f1033c78c51ac79a941109265b8339154bfc256c6dc6d5abfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116199

Malicious code in barnard-commitlint-hermes-enceladus npm...

Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114176

Malicious code in electron-virgo-izar-commitlint-config-angular npm...

EUVD-2025-113420

Malicious code in framework-quasar-spawn-commitlint-config-angular npm...