Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115622

Malicious code in castor-hyperion-semantic-release-fusion npm...

EUVD-2025-122093

Malicious code in semantic-release-janus-pyxis-electron npm...

EUVD-2025-111122

Malicious code in mini-css-extract-plugin-release-it-antares-rollup npm...

EUVD-2025-116272

Malicious code in axios-ignite-ignite-release-it npm...

EUVD-2025-122705

Malicious code in release-it-blitz-colors-protractor npm...

EUVD-2025-115373

Malicious code in charon-semantic-release-vuepress-centaurus npm...

EUVD-2025-112554

Malicious code in indus-bootes-release-it-mui npm...

EUVD-2025-113523

Malicious code in fork-gulp-bellatrix-semantic-release npm...

EUVD-2025-122695

Malicious code in release-it-nightwatch-jekyll-yildun npm...

EUVD-2025-112282

Malicious code in janus-sagitta-arcturus-semantic-release npm...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

Malicious code in vega-semantic-release-vuepress-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124773

Malicious code in mongoose-altair-carpo-release-it npm...

EUVD-2025-116097

Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...

EUVD-2025-122104

Malicious code in semantic-release-apollo-pyxis-changelog npm...

EUVD-2025-122100

Malicious code in semantic-release-cordelia-quark-update npm...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147226 Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef36d47d6ae8f741f94ac19f984fd1f6347dbc887b13c2ce02e86997baa8cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...