Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122692

Malicious code in release-it-phoenix-node-sass-dependencies npm...

EUVD-2025-124143

Malicious code in octans-release-it-carina-query npm...

EUVD-2025-111739

Malicious code in library-eleventy-start-semantic-release npm...

EUVD-2025-121771

Malicious code in spica-ceres-semantic-release-janus npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-114913

Malicious code in cosmiconfig-release-it-xenon-pyxis npm...

EUVD-2025-115204

Malicious code in command-geckodriver-nodemon-release-it npm...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

EUVD-2025-112840

Malicious code in hercules-betelgeuse-build-release-it npm...

EUVD-2025-122685

Malicious code in release-it-toml-transport-carpo npm...

EUVD-2025-122868

Malicious code in react-bootstrap-docusaurus-release-it-wasat npm...

Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115549

Malicious code in centaurus-websockets-enceladus-semantic-release npm...

EUVD-2025-120211

Malicious code in xerxes-slides-semantic-release-gravity npm...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-113312

Malicious code in ganymede-got-got-release-it npm...

EUVD-2025-112070

Malicious code in juno-wasat-npm-semantic-release npm...

EUVD-2025-114973

Malicious code in cors-semantic-release-eris-webdriverio npm...

Malicious code in semantic-release-cordelia-quark-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...