EUVD-2025-113024

Malicious code in grus-chai-library-commitlint-config-angular npm...

EUVD-2025-115135

Malicious code in commitlint-config-angular-ultra-bellatrix-mdx npm...

EUVD-2025-114693

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay npm...

EUVD-2025-113532

Malicious code in fork-carpo-commitlint-gulp npm...

EUVD-2025-120680

Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer npm...

Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116483

Malicious code in astro-vortex-commitlint-prompts npm...

EUVD-2025-115389

Malicious code in charon-commitlint-config-angular-mdx-umbriel npm...

EUVD-2025-115112

Malicious code in commitlint-webdriver-mocha-titan-auth0 npm...

EUVD-2025-124064

Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex npm...

EUVD-2025-111243

Malicious code in metalsmith-celeste-commitlint-config-angular-gacrux npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-122662

Malicious code in repository-commitlint-config-angular-fetch-xenos npm...

EUVD-2025-115184

Malicious code in commitizen-await-commitlint-config-angular-chalk npm...

Malicious code in hexo-sagitta-commitlint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8d4af8548fd6dffe8219bc5c04d3605874cbaf28f4a936efcbd967d53b400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116915

Malicious code in acamar-sirius-janus-commitlint npm...

EUVD-2025-112602

Malicious code in ignite-commitlint-config-angular-iota-corvus npm...

MAL-2025-140978 Malicious code in commitlint-dependencies-upgrade-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5898bd5cbadcc7c16719896fe4bd6366ecedecc6cc744aedf81ca570c71865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...