EUVD-2025-123512

Malicious code in postcss-loader-semantic-release-slides-buffer npm...

EUVD-2025-122101

Malicious code in semantic-release-bunyan-enif-zephyr npm...

Malicious code in semantic-release-apollo-pyxis-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112617

Malicious code in hyperion-release-it-halley-radiant npm...

EUVD-2025-121842

Malicious code in solis-release-it-altair-betelgeuse npm...

EUVD-2025-111180

Malicious code in meteor-semantic-release-inquirer-pegasus npm...

EUVD-2025-112550

Malicious code in indus-elara-selenium-release-it npm...

EUVD-2025-122090

Malicious code in semantic-release-pavo-winston-xo npm...

EUVD-2025-124612

Malicious code in nconf-commitizen-semantic-release-testcafe npm...

EUVD-2025-120276

Malicious code in xenon-oberon-semantic-release-mysql npm...

EUVD-2025-120667

Malicious code in warp-build-postcss-loader-semantic-release npm...

EUVD-2025-113785

Malicious code in event-spica-gridsome-semantic-release npm...

EUVD-2025-116710

Malicious code in antares-auth-thuban-semantic-release npm...

EUVD-2025-116072

Malicious code in blaze-release-it-cross-env-yakutsk npm...

EUVD-2025-122759

Malicious code in rehype-auth0-superagent-semantic-release npm...

EUVD-2025-123998

Malicious code in package-avior-backend-release-it npm...

EUVD-2025-122105

Malicious code in semantic-release-andromeda-cosmos-izar npm...

EUVD-2025-122224

Malicious code in schema-semantic-release-andromeda-celeste npm...

Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-semantic-release-auth-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...