223 matches found
EUVD-2025-113523
Malicious code in fork-gulp-bellatrix-semantic-release npm...
EUVD-2025-122105
Malicious code in semantic-release-andromeda-cosmos-izar npm...
EUVD-2025-120255
Malicious code in xenos-framework-semantic-release-query npm...
EUVD-2025-123374
Malicious code in process-eleventy-tool-semantic-release npm...
EUVD-2025-115373
Malicious code in charon-semantic-release-vuepress-centaurus npm...
EUVD-2025-123512
Malicious code in postcss-loader-semantic-release-slides-buffer npm...
Malicious code in semantic-release-apollo-pyxis-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112478
Malicious code in init-writable-pino-semantic-release npm...
EUVD-2025-122224
Malicious code in schema-semantic-release-andromeda-celeste npm...
Malicious code in slides-semantic-release-auth-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122093
Malicious code in semantic-release-janus-pyxis-electron npm...
EUVD-2025-116097
Malicious code in betelgeuse-semantic-release-jekyll-release-it npm...
EUVD-2025-112282
Malicious code in janus-sagitta-arcturus-semantic-release npm...
EUVD-2025-111168
Malicious code in middleware-barnard-update-semantic-release npm...
EUVD-2025-124612
Malicious code in nconf-commitizen-semantic-release-testcafe npm...
EUVD-2025-113785
Malicious code in event-spica-gridsome-semantic-release npm...
EUVD-2025-122090
Malicious code in semantic-release-pavo-winston-xo npm...
Malicious code in xenos-framework-semantic-release-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...