EUVD-2025-122690

Malicious code in release-it-quantum-delphinus-readable npm...

EUVD-2025-124539

Malicious code in neptune-stop-semantic-release-nestjs npm...

EUVD-2025-122692

Malicious code in release-it-phoenix-node-sass-dependencies npm...

EUVD-2025-124779

Malicious code in mongodb-semantic-release-elektra-delphinus npm...

EUVD-2025-120787

Malicious code in version-mongoose-cors-semantic-release npm...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

EUVD-2025-116857

Malicious code in aether-vulcan-nightwatch-release-it npm...

EUVD-2025-112432

Malicious code in install-release-it-celeste-xanadu npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-123152

Malicious code in public-supervisor-semantic-release-rate-limiter npm...

EUVD-2025-121771

Malicious code in spica-ceres-semantic-release-janus npm...

EUVD-2025-120831

Malicious code in vega-semantic-release-vuepress-venus npm...

MAL-2025-147836 Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-122685

Malicious code in release-it-toml-transport-carpo npm...

EUVD-2025-113469

Malicious code in fornax-phoebe-release-it-ganymede npm...

EUVD-2025-123840

Malicious code in perseus-elektra-spawn-semantic-release npm...

EUVD-2025-113082

Malicious code in gravity-release-it-grus-hermes npm...