EUVD-2025-112535

Malicious code in indus-standard-semantic-release-prompts npm...

EUVD-2025-122084

Malicious code in semantic-release-update-kronos-rest npm...

EUVD-2025-122688

Malicious code in release-it-release-it-semantic-ui-vortex npm...

EUVD-2025-111120

Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes npm...

EUVD-2025-113469

Malicious code in fornax-phoebe-release-it-ganymede npm...

Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124731

Malicious code in morgan-release-it-umbriel-pino-pretty npm...

EUVD-2025-122099

Malicious code in semantic-release-eslint-config-grus-capella npm...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120900

Malicious code in upgrade-release-it-delphinus-colors npm...

EUVD-2025-112933

Malicious code in hapi-commitizen-update-semantic-release npm...

EUVD-2025-122702

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint npm...

EUVD-2025-120831

Malicious code in vega-semantic-release-vuepress-venus npm...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

EUVD-2025-116793

Malicious code in algol-semantic-release-umbriel-avior npm...

EUVD-2025-115823

Malicious code in cache-semantic-release-uninstall-hapi npm...

EUVD-2025-123840

Malicious code in perseus-elektra-spawn-semantic-release npm...

EUVD-2025-116317

Malicious code in avior-semantic-release-prettier-cz-conventional-changelog npm...

EUVD-2025-121447

Malicious code in taurus-semantic-release-auth0-castor npm...

Malicious code in ignite-terser-semantic-release-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4740b5cdbba2d2377b1829c9da61e44e441d93edd5e03312be87545b04a45ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...