37378 matches found
EUVD-2025-115549
Malicious code in centaurus-websockets-enceladus-semantic-release npm...
EUVD-2025-120211
Malicious code in xerxes-slides-semantic-release-gravity npm...
EUVD-2025-113312
Malicious code in ganymede-got-got-release-it npm...
EUVD-2025-112070
Malicious code in juno-wasat-npm-semantic-release npm...
Malicious code in semantic-release-cordelia-quark-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120478
Malicious code in wezen-capella-release-it-atlas npm...
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122475
Malicious code in rimraf-concurrently-release-it-impulse npm...
EUVD-2025-122102
Malicious code in semantic-release-backend-scripts-publish npm...
EUVD-2025-115569
Malicious code in centauri-semantic-release-rehype-quark npm...
EUVD-2025-122086
Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...
EUVD-2025-122095
Malicious code in semantic-release-impulse-taurus-standard npm...
EUVD-2025-111241
Malicious code in metalsmith-dagda-ganymede-semantic-release npm...
EUVD-2025-124624
Malicious code in native-quito-venus-semantic-release npm...
Malicious code in semantic-release-native-server-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in centaurus-websockets-enceladus-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-release-it-grus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115374
Malicious code in charon-semantic-release-nashira-child-process npm...
Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...