EUVD-2025-116857

Malicious code in aether-vulcan-nightwatch-release-it npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-122095

Malicious code in semantic-release-impulse-taurus-standard npm...

EUVD-2025-111241

Malicious code in metalsmith-dagda-ganymede-semantic-release npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

Malicious code in semantic-release-native-server-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112432

Malicious code in install-release-it-celeste-xanadu npm...

Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122688

Malicious code in release-it-release-it-semantic-ui-vortex npm...

MAL-2025-147833 Malicious code in semantic-release-pavo-winston-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79981c099c9d1ef7e0a447288b3f3a95d5de7a9bf8ba48b90112ecf212dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148239 Malicious code in sqlite-semantic-release-chariklo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a70877cf6fc7144944e3d17633b64feec401c7798f2edb05735691b1437526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...