EUVD-2025-115120

Malicious code in commitlint-hyperion-morgan-gridsome npm...

EUVD-2025-121509

Malicious code in sync-commitlint-materialize-eris npm...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140957 Malicious code in commitlint-config-angular-babel-tethys-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04a333bf1423d0e012301db68a1e6f00312db7d04e434040b97bb4bd1191282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140980 Malicious code in commitlint-equinox-antares-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9f4821f0ee99f48562646d82f3f69fd8b7ec96aa2acfa28f0dfb34f662d098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140983 Malicious code in commitlint-exec-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a29c972093ebe62f0e65806d1b9a7bbb36b4ced01737a961f52681337efd871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140972 Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ad258019d17cd509e8f6df52866f9c59c14140aee5a0bc52dfe9f6b0071a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144176 Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143029 Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142613 Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140966 Malicious code in commitlint-config-angular-kinetic-sync-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5a433ce137399730f4787f7ebd10b3bb31e67f24026ffc2b1576bc0da5f2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140981 Malicious code in commitlint-event-hapi-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c7e4542e0c1b82a096fb6fede5659820f6472f2fa073cce4034c27f936ac04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115121

Malicious code in commitlint-hercules-slidev-draco npm...

EUVD-2025-122482

Malicious code in rigel-spectron-webdriver-dotenv-commitlint npm...

Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115153

Malicious code in commitlint-chai-wasat-socketio npm...

EUVD-2025-124890

Malicious code in miranda-dactyl-nextjs-commitlint npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

Malicious code in commitlint-hyperion-morgan-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b017e87cab1331f2b8c026fb02605c014ba3e727b00836a191223d6e44a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...