EUVD-2025-114914

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint npm...

EUVD-2025-112509

Malicious code in ini-release-it-pyxis-auriga npm...

EUVD-2025-116097

Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...

EUVD-2025-121842

Malicious code in solis-release-it-altair-betelgeuse npm...

EUVD-2025-112550

Malicious code in indus-elara-selenium-release-it npm...

EUVD-2025-122705

Malicious code in release-it-blitz-colors-protractor npm...

EUVD-2025-112554

Malicious code in indus-bootes-release-it-mui npm...

EUVD-2025-112383

Malicious code in iota-json-release-it-chai npm...

MAL-2025-148501 Malicious code in telesto-release-it-google-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ccdd5032ea5072b6c78227164fcfdd6caeffefe98b43a5d8156d92454dd74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145778 Malicious code in octans-release-it-carina-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b65c20fbd5e2fe8d1a71298ca00870d815cd43e9e5cb9994d32666f2c406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147226 Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef36d47d6ae8f741f94ac19f984fd1f6347dbc887b13c2ce02e86997baa8cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-prettier-nodejs-fornax (npm)

The package release-it-prettier-nodejs-fornax was found to contain malicious code...

MAL-2025-45793 Malicious code in release-it-oscillation-lithosphere-dysonswarm (npm)

The package release-it-oscillation-lithosphere-dysonswarm was found to contain malicious code...

MAL-2025-45794 Malicious code in release-it-prettier-nodejs-fornax (npm)

The package release-it-prettier-nodejs-fornax was found to contain malicious code...

Malicious code in release-it-winston-lightyear-magellan (npm)

The package release-it-winston-lightyear-magellan was found to contain malicious code...

Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

MAL-2025-45057 Malicious code in local-release-it-exec-graphql (npm)

The package local-release-it-exec-graphql was found to contain malicious code...

MAL-2025-43718 Malicious code in celeste-spica-release-it-hydra (npm)

The package celeste-spica-release-it-hydra was found to contain malicious code...

Malicious code in release-it-blazar-warp-avior (npm)

The package release-it-blazar-warp-avior was found to contain malicious code...