223 matches found
EUVD-2025-121447
Malicious code in taurus-semantic-release-auth0-castor npm...
EUVD-2025-112683
Malicious code in husky-semantic-release-zenith-iota npm...
EUVD-2025-113318
Malicious code in galaxy-semantic-release-auriga-norma npm...
MAL-2025-147836 Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121686
Malicious code in sqlite-semantic-release-chariklo-mysql npm...
Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120276
Malicious code in xenon-oberon-semantic-release-mysql npm...
EUVD-2025-116097
Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...
EUVD-2025-123153
Malicious code in public-semantic-release-ophiuchus-jovian npm...
EUVD-2025-123374
Malicious code in process-eleventy-tool-semantic-release npm...
EUVD-2025-122103
Malicious code in semantic-release-ariel-link-ignite npm...
MAL-2025-139785 Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1bee846b0039c60e0e0057b6c29b031b648b21ebbe632243dafe96452cfc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122105
Malicious code in semantic-release-andromeda-cosmos-izar npm...
Malicious code in slides-semantic-release-auth-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...