647 matches found
MAL-2025-140718 Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115132
Malicious code in commitlint-csv-auth-oberon npm...
MAL-2025-140976 Malicious code in commitlint-csv-auth-oberon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38ec831b063c5df584e2cbbebb9f222f1a0f88cf465297439c89873f5634853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124676
Malicious code in mysql-commitlint-json-standard npm...
EUVD-2025-122544
Malicious code in restart-dagda-commitlint-achernar npm...
MAL-2025-140981 Malicious code in commitlint-event-hapi-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c7e4542e0c1b82a096fb6fede5659820f6472f2fa073cce4034c27f936ac04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115441
Malicious code in changelog-cosmiconfig-sass-loader-commitlint npm...
Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chalk-sirius-commitlint-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bba1e8688eb4ecf682073f2e20d6832d25b7acebe1f8a59e848fc460540dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-staged-commitlint-global-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115672
Malicious code in carpo-centauri-commitlint-config-angular-callback npm...
EUVD-2025-115151
Malicious code in commitlint-config-angular-babel-tethys-sirius npm...
Malware in @crowdstrike/commitlint
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47233 Malicious code in @crowdstrike/commitlint (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e58c63ca78f39890835120723ac0ab398dbaddb3018f3b640145685ab38cdd93 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in @crowdstrike/commitlint (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e58c63ca78f39890835120723ac0ab398dbaddb3018f3b640145685ab38cdd93 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in commitlint-sedimentology-got-css-loader (npm)
The package commitlint-sedimentology-got-css-loader was found to contain malicious code...
Malicious code in astrophysics-commitlint-config-angular-unuk-luna (npm)
The package astrophysics-commitlint-config-angular-unuk-luna was found to contain malicious code...