481 matches found
MAL-2025-140718 Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140975 Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140957 Malicious code in commitlint-config-angular-babel-tethys-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04a333bf1423d0e012301db68a1e6f00312db7d04e434040b97bb4bd1191282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120316
Malicious code in xanadu-vortex-commitlint-electron npm...
EUVD-2025-121147
Malicious code in transport-commitlint-callback-andromeda npm...
MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140972 Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ad258019d17cd509e8f6df52866f9c59c14140aee5a0bc52dfe9f6b0071a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in @crowdstrike/commitlint (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e58c63ca78f39890835120723ac0ab398dbaddb3018f3b640145685ab38cdd93 Any computer that has this package installed or running should be considered fully compromised. All...
Malware in @crowdstrike/commitlint
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47233 Malicious code in @crowdstrike/commitlint (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e58c63ca78f39890835120723ac0ab398dbaddb3018f3b640145685ab38cdd93 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm)
The package antimatter-commitlint-config-angular-archaeoastronomy-lint was found to contain malicious code...
Malicious code in astrophysics-commitlint-config-angular-unuk-luna (npm)
The package astrophysics-commitlint-config-angular-unuk-luna was found to contain malicious code...
Malicious code in commitlint-config-angular-photon-plutology-bioinformatics (npm)
The package commitlint-config-angular-photon-plutology-bioinformatics was found to contain malicious code...
Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)
The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...
Malicious code in commitlint-sedimentology-got-css-loader (npm)
The package commitlint-sedimentology-got-css-loader was found to contain malicious code...
Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm)
The package heliophysics-comet-rollup-plugin-commitlint-config-angular was found to contain malicious code...