EUVD-2025-123153

Malicious code in public-semantic-release-ophiuchus-jovian npm...

EUVD-2025-120455

Malicious code in wezen-yakutsk-semantic-release-sirius npm...

EUVD-2025-114120

Malicious code in eleventy-aurora-csrf-semantic-release npm...

EUVD-2025-121524

Malicious code in supervisor-semantic-release-vortex-jest npm...

EUVD-2025-122089

Malicious code in semantic-release-process-alphard-commitizen npm...

EUVD-2025-121716

Malicious code in spinner-semantic-release-nuxtjs-polaris npm...

MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149262 Malicious code in warp-build-postcss-loader-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142261 Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122759

Malicious code in rehype-auth0-superagent-semantic-release npm...

EUVD-2025-122097

Malicious code in semantic-release-google-warp-vuetify npm...

EUVD-2025-122224

Malicious code in schema-semantic-release-andromeda-celeste npm...

EUVD-2025-112478

Malicious code in init-writable-pino-semantic-release npm...

EUVD-2025-124358

Malicious code in nodejs-eris-izar-semantic-release npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

Malicious code in husky-semantic-release-zenith-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87639580b2295d715793808bd79c4df8d0369be6ec95e23142965473ebf761f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...