37177 matches found
EUVD-2025-122131
Malicious code in sedna-semantic-release-gridsome-janus npm...
EUVD-2025-124110
Malicious code in ophiuchus-chakra-ui-release-it-concurrently npm...
EUVD-2025-122094
Malicious code in semantic-release-inquirer-nestjs-publish npm...
MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120158
Malicious code in yakutsk-kastra-webpack-release-it npm...
EUVD-2025-121847
Malicious code in solis-levels-html-webpack-plugin-release-it npm...
EUVD-2025-124843
Malicious code in mocha-fornax-umbriel-release-it npm...
EUVD-2025-122759
Malicious code in rehype-auth0-superagent-semantic-release npm...
EUVD-2025-113785
Malicious code in event-spica-gridsome-semantic-release npm...
EUVD-2025-116710
Malicious code in antares-auth-thuban-semantic-release npm...
EUVD-2025-122097
Malicious code in semantic-release-google-warp-vuetify npm...