37174 matches found
EUVD-2025-123404
Malicious code in prettier-stylelint-semantic-release-concurrently-vega npm...
EUVD-2025-113538
Malicious code in forever-release-it-iota-virgo npm...
EUVD-2025-122091
Malicious code in semantic-release-native-server-mysql npm...
EUVD-2025-113082
Malicious code in gravity-release-it-grus-hermes npm...
EUVD-2025-123152
Malicious code in public-supervisor-semantic-release-rate-limiter npm...
EUVD-2025-124539
Malicious code in neptune-stop-semantic-release-nestjs npm...
MAL-2025-139785 Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1bee846b0039c60e0e0057b6c29b031b648b21ebbe632243dafe96452cfc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120057
Malicious code in zenobia-semantic-release-wolf-celeste npm...
MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147833 Malicious code in semantic-release-pavo-winston-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79981c099c9d1ef7e0a447288b3f3a95d5de7a9bf8ba48b90112ecf212dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148239 Malicious code in sqlite-semantic-release-chariklo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a70877cf6fc7144944e3d17633b64feec401c7798f2edb05735691b1437526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147836 Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...