148 matches found
EUVD-2025-122703
Malicious code in release-it-command-express-pyxis npm...
EUVD-2025-122686
Malicious code in release-it-tailwindcss-pyxis-module npm...
EUVD-2025-122001
Malicious code in shelljs-nestjs-orbit-release-it npm...
Malicious code in release-it-sass-loader-parcel-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113062
Malicious code in gridsome-release-it-cluster-antares npm...
EUVD-2025-122684
Malicious code in release-it-transform-grus-apex npm...
EUVD-2025-122687
Malicious code in release-it-sass-loader-parcel-fork npm...
EUVD-2025-123726
Malicious code in phoenix-fornax-dagda-release-it npm...
EUVD-2025-124110
Malicious code in ophiuchus-chakra-ui-release-it-concurrently npm...
EUVD-2025-120158
Malicious code in yakutsk-kastra-webpack-release-it npm...
EUVD-2025-121847
Malicious code in solis-levels-html-webpack-plugin-release-it npm...
EUVD-2025-112509
Malicious code in ini-release-it-pyxis-auriga npm...
EUVD-2025-111122
Malicious code in mini-css-extract-plugin-release-it-antares-rollup npm...
EUVD-2025-116097
Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...
EUVD-2025-124773
Malicious code in mongoose-altair-carpo-release-it npm...
EUVD-2025-114332
Malicious code in dotenv-safe-semantic-ui-corvus-release-it npm...
MAL-2025-145778 Malicious code in octans-release-it-carina-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b65c20fbd5e2fe8d1a71298ca00870d815cd43e9e5cb9994d32666f2c406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147226 Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef36d47d6ae8f741f94ac19f984fd1f6347dbc887b13c2ce02e86997baa8cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...