EUVD-2025-114471

Malicious code in development-version-schema-semantic-release npm...

Malicious code in release-it-sass-loader-parcel-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120375

Malicious code in wolf-perseus-release-it-mongodb npm...

EUVD-2025-120158

Malicious code in yakutsk-kastra-webpack-release-it npm...

EUVD-2025-121847

Malicious code in solis-levels-html-webpack-plugin-release-it npm...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-124358

Malicious code in nodejs-eris-izar-semantic-release npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

Malicious code in husky-semantic-release-zenith-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87639580b2295d715793808bd79c4df8d0369be6ec95e23142965473ebf761f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111728

Malicious code in library-prettier-stylelint-semantic-release-centauri npm...

EUVD-2025-115712

Malicious code in capella-phoebe-vega-release-it npm...

EUVD-2025-123374

Malicious code in process-eleventy-tool-semantic-release npm...

EUVD-2025-121450

Malicious code in taurus-release-it-sadr-mui npm...

EUVD-2025-122088

Malicious code in semantic-release-rimraf-polaris-sync npm...

Malicious code in slides-semantic-release-auth-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124773

Malicious code in mongoose-altair-carpo-release-it npm...

Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...