EUVD-2025-124612

Malicious code in nconf-commitizen-semantic-release-testcafe npm...

EUVD-2025-120276

Malicious code in xenon-oberon-semantic-release-mysql npm...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

EUVD-2025-112617

Malicious code in hyperion-release-it-halley-radiant npm...

Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122093

Malicious code in semantic-release-janus-pyxis-electron npm...

EUVD-2025-116097

Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...

EUVD-2025-120255

Malicious code in xenos-framework-semantic-release-query npm...

Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123374

Malicious code in process-eleventy-tool-semantic-release npm...

Malicious code in semantic-release-update-kronos-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da546cb3c2bf0dd517acd0ea1b421c16b51e5572a631825d7770db5b7ac38f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111168

Malicious code in middleware-barnard-update-semantic-release npm...

MAL-2025-147402 Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149098 Malicious code in vega-semantic-release-vuepress-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121450

Malicious code in taurus-release-it-sadr-mui npm...

MAL-2025-148501 Malicious code in telesto-release-it-google-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ccdd5032ea5072b6c78227164fcfdd6caeffefe98b43a5d8156d92454dd74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147838 Malicious code in semantic-release-umbriel-enif-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...