EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-114913

Malicious code in cosmiconfig-release-it-xenon-pyxis npm...

EUVD-2025-115204

Malicious code in command-geckodriver-nodemon-release-it npm...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

EUVD-2025-124208

Malicious code in nuxtjs-release-it-reveal-md-iota npm...

EUVD-2025-122692

Malicious code in release-it-phoenix-node-sass-dependencies npm...

EUVD-2025-122685

Malicious code in release-it-toml-transport-carpo npm...

EUVD-2025-113469

Malicious code in fornax-phoebe-release-it-ganymede npm...

EUVD-2025-113082

Malicious code in gravity-release-it-grus-hermes npm...

EUVD-2025-113312

Malicious code in ganymede-got-got-release-it npm...

EUVD-2025-120478

Malicious code in wezen-capella-release-it-atlas npm...

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122475

Malicious code in rimraf-concurrently-release-it-impulse npm...

EUVD-2025-116857

Malicious code in aether-vulcan-nightwatch-release-it npm...

EUVD-2025-112432

Malicious code in install-release-it-celeste-xanadu npm...

Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111456

Malicious code in magellan-reveal-md-release-it-mocha npm...

MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...