EUVD-2025-176897

Malicious code in puppeteer-exobiology-semantic-release-less npm...

EUVD-2025-176517

Malicious code in saturnology-astroinformatics-release-it-test npm...

Malicious code in nightwatch-abiogenesis-semantic-release-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c04dce162afc7d6c59dc05512d4f23f6779a6891e85414c6a52032e9fc0c2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177420

Malicious code in ora-release-it-ichnology-subscription npm...

EUVD-2025-178975

Malicious code in exoplanet-titan-repository-release-it npm...

EUVD-2025-178776

Malicious code in ganymede-nestjs-izar-release-it npm...

EUVD-2025-179990

Malicious code in bootstrap-semantic-release-pulsar-koa npm...

MAL-2025-189321 Malicious code in sagitta-schema-release-it-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189438 Malicious code in semantic-release-aether-buffer-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef5dd537b321d8fe283fd48cc1202163ccbfdacb0405c484311db90efcf6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175899

Malicious code in transhumanism-release-it-neptune-init npm...

EUVD-2025-176711

Malicious code in release-it-juno-cypress-ganymede npm...

EUVD-2025-177753

Malicious code in morgan-sass-loader-release-it-quark npm...

Malicious code in release-it-biogeochemistry-geoarchaeology-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5743b02a4835cd12ed5f2fe483d4025048b9db674a57d31bcc2707937ddca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176284

Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin npm...

EUVD-2025-177602

Malicious code in nightwatch-abiogenesis-semantic-release-supercluster npm...

EUVD-2025-177340

Malicious code in palynology-semantic-release-pulsar-wormhole npm...

EUVD-2025-179873

Malicious code in carpo-release-it-oberon-halley npm...

EUVD-2025-178552

Malicious code in helmet-supercluster-release-it-technosignature npm...

EUVD-2025-179033

Malicious code in eslint-plugin-semantic-release-chalk-fusion npm...

Malicious code in release-it-library-start-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...