EUVD-2025-122431

Malicious code in rollup-barnard-cz-conventional-changelog-regulus npm...

EUVD-2025-114686

Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch npm...

EUVD-2025-122977

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot npm...

EUVD-2025-122124

Malicious code in selenium-antares-lynx-cz-conventional-changelog npm...

EUVD-2025-111108

Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager npm...

MAL-2025-144235 Malicious code in lacerta-configstore-cz-conventional-changelog-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0a3732e31985a11e0193d3314a95967bfe48f5cac077d7528b1c51f6e81c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140427 Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116421

Malicious code in auriga-less-cz-conventional-changelog-axios npm...

EUVD-2025-114677

Malicious code in cz-conventional-changelog-request-axios-resolvers npm...

EUVD-2025-111588

Malicious code in loop-hugo-cz-conventional-changelog-markdown npm...

EUVD-2025-114689

Malicious code in cz-conventional-changelog-ini-equinox-enif npm...

EUVD-2025-124609

Malicious code in nconf-dorado-blaze-cz-conventional-changelog npm...

EUVD-2025-114674

Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe npm...

Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 055ec0f2807c9f58b686c8b3747d316d6d0ca5fb31a450e20d2d6a57d9b1d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120096

Malicious code in yonder-docusaurus-cz-conventional-changelog-transport npm...

EUVD-2025-121632

Malicious code in stop-duplex-cz-conventional-changelog-quark npm...

MAL-2025-45333 Malicious code in node-sass-cz-conventional-changelog-foundation-nashira (npm)

The package node-sass-cz-conventional-changelog-foundation-nashira was found to contain malicious code...

MAL-2025-45905 Malicious code in rollup-plugin-markdownlint-cz-conventional-changelog-altair (npm)

The package rollup-plugin-markdownlint-cz-conventional-changelog-altair was found to contain malicious code...

MAL-2025-44657 Malicious code in hydra-command-cz-conventional-changelog-resolvers (npm)

The package hydra-command-cz-conventional-changelog-resolvers was found to contain malicious code...

Malicious code in node-sass-cz-conventional-changelog-foundation-nashira (npm)

The package node-sass-cz-conventional-changelog-foundation-nashira was found to contain malicious code...