223 matches found
EUVD-2025-111180
Malicious code in meteor-semantic-release-inquirer-pegasus npm...
Malicious code in development-version-schema-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vega-semantic-release-vuepress-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122090
Malicious code in semantic-release-pavo-winston-xo npm...
EUVD-2025-124612
Malicious code in nconf-commitizen-semantic-release-testcafe npm...
EUVD-2025-120276
Malicious code in xenon-oberon-semantic-release-mysql npm...
EUVD-2025-120667
Malicious code in warp-build-postcss-loader-semantic-release npm...
EUVD-2025-113785
Malicious code in event-spica-gridsome-semantic-release npm...
EUVD-2025-116710
Malicious code in antares-auth-thuban-semantic-release npm...
EUVD-2025-115373
Malicious code in charon-semantic-release-vuepress-centaurus npm...
EUVD-2025-113523
Malicious code in fork-gulp-bellatrix-semantic-release npm...
MAL-2025-147838 Malicious code in semantic-release-umbriel-enif-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122105
Malicious code in semantic-release-andromeda-cosmos-izar npm...
MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147402 Malicious code in restart-xanadu-warp-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149098 Malicious code in vega-semantic-release-vuepress-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...