37384 matches found
MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114124
Malicious code in element-ui-version-release-it-deneb npm...
Malicious code in semantic-release-inquirer-nestjs-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122946
Malicious code in query-release-it-pulsar-nextjs npm...
EUVD-2025-122683
Malicious code in release-it-xo-jekyll-relay npm...
EUVD-2025-122097
Malicious code in semantic-release-google-warp-vuetify npm...
EUVD-2025-120158
Malicious code in yakutsk-kastra-webpack-release-it npm...
EUVD-2025-121847
Malicious code in solis-levels-html-webpack-plugin-release-it npm...
EUVD-2025-124358
Malicious code in nodejs-eris-izar-semantic-release npm...
EUVD-2025-122085
Malicious code in semantic-release-umbriel-enif-foundation npm...
Malicious code in husky-semantic-release-zenith-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87639580b2295d715793808bd79c4df8d0369be6ec95e23142965473ebf761f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111728
Malicious code in library-prettier-stylelint-semantic-release-centauri npm...
EUVD-2025-115712
Malicious code in capella-phoebe-vega-release-it npm...