EUVD-2025-114881

Malicious code in cressida-cygnus-commitlint-config-angular-readable npm...

EUVD-2025-115126

Malicious code in commitlint-exec-express-perseus npm...

EUVD-2025-121470

Malicious code in taurus-antares-child-process-commitlint-config-angular npm...

EUVD-2025-122696

Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint npm...

EUVD-2025-113619

Malicious code in firebase-cressida-commitlint-subscription npm...

EUVD-2025-122005

Malicious code in shelljs-library-development-commitlint npm...

EUVD-2025-114828

Malicious code in csrf-commitlint-config-angular-axios-lacerta npm...

EUVD-2025-123829

Malicious code in perseus-kronos-figures-commitlint-config-angular npm...

EUVD-2025-115144

Malicious code in commitlint-config-angular-global-dotenv-andromeda npm...

Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124676

Malicious code in mysql-commitlint-json-standard npm...

EUVD-2025-124649

Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes npm...

EUVD-2025-115140

Malicious code in commitlint-config-angular-meissa-eleventy-spica npm...

EUVD-2025-121789

Malicious code in spectron-webdriver-oauth-spectron-webdriver-commitlint npm...

EUVD-2025-116483

Malicious code in astro-vortex-commitlint-prompts npm...

Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115134

Malicious code in commitlint-config-angular-vuepress-csv-hermes npm...

MAL-2025-140986 Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140973 Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c226c4b1a3a0f8193958d600960e0a77134c920f899336f377da7683130fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...