EUVD-2025-120316

Malicious code in xanadu-vortex-commitlint-electron npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140972 Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ad258019d17cd509e8f6df52866f9c59c14140aee5a0bc52dfe9f6b0071a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111471

Malicious code in magellan-less-loader-proxima-commitlint npm...

EUVD-2025-111280

Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha npm...

EUVD-2025-111143

Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt npm...

EUVD-2025-112602

Malicious code in ignite-commitlint-config-angular-iota-corvus npm...

EUVD-2025-112473

Malicious code in inquirer-chalk-commitlint-config-angular-loopback npm...

EUVD-2025-112453

Malicious code in inquirer-sails-bulma-commitlint-config-angular npm...

EUVD-2025-111937

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...

Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cf84f490e85f93aeb7b72ac10d1b4ee6b01c6c1aceed157aa3de391b02c2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-sirius-commitlint-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bba1e8688eb4ecf682073f2e20d6832d25b7acebe1f8a59e848fc460540dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-apollo-sequelize-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c3f23943a372761b3922807be26f6d0d6aa6f29d881e122916b5201148a69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6a0d51daae52a547b9b3598450667891d02849ff498b84efe3b37fcfd722e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-meissa-eleventy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681ba9550446a588220fdac2f9b56dc00be490c463173006f33d13714544082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-csv-auth-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38ec831b063c5df584e2cbbebb9f222f1a0f88cf465297439c89873f5634853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...