37177 matches found
EUVD-2025-112478
Malicious code in init-writable-pino-semantic-release npm...
EUVD-2025-123652
Malicious code in pipe-release-it-hermes-rollup-plugin npm...
EUVD-2025-124358
Malicious code in nodejs-eris-izar-semantic-release npm...
EUVD-2025-122085
Malicious code in semantic-release-umbriel-enif-foundation npm...
Malicious code in husky-semantic-release-zenith-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87639580b2295d715793808bd79c4df8d0369be6ec95e23142965473ebf761f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111728
Malicious code in library-prettier-stylelint-semantic-release-centauri npm...
EUVD-2025-115712
Malicious code in capella-phoebe-vega-release-it npm...
EUVD-2025-122088
Malicious code in semantic-release-rimraf-polaris-sync npm...
Malicious code in slides-semantic-release-auth-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124773
Malicious code in mongoose-altair-carpo-release-it npm...
EUVD-2025-111122
Malicious code in mini-css-extract-plugin-release-it-antares-rollup npm...
Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122104
Malicious code in semantic-release-apollo-pyxis-changelog npm...
EUVD-2025-115622
Malicious code in castor-hyperion-semantic-release-fusion npm...
EUVD-2025-122100
Malicious code in semantic-release-cordelia-quark-update npm...
Malicious code in hydra-semantic-release-flare-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115219
Malicious code in comet-proxima-csv-release-it npm...
EUVD-2025-122695
Malicious code in release-it-nightwatch-jekyll-yildun npm...