223 matches found
Malicious code in vulcan-semantic-release-pino-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72d9e409094829214238543e07bf97ca0de11f012ae732f970551021eb40d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177656
Malicious code in neptune-redshift-semantic-release-xml npm...
EUVD-2025-177340
Malicious code in palynology-semantic-release-pulsar-wormhole npm...
EUVD-2025-176722
Malicious code in relay-development-update-semantic-release npm...
EUVD-2025-175387
Malicious code in zooarchaeology-nodemon-semantic-release-backend npm...
EUVD-2025-176456
Malicious code in sedna-semantic-release-meissa-winston npm...
EUVD-2025-180326
Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown npm...
MAL-2025-189438 Malicious code in semantic-release-aether-buffer-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef5dd537b321d8fe283fd48cc1202163ccbfdacb0405c484311db90efcf6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190209 Malicious code in vulcan-semantic-release-pino-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72d9e409094829214238543e07bf97ca0de11f012ae732f970551021eb40d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in puppeteer-exobiology-semantic-release-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492b2388e50d217d03a5e5f9711d814fffbd1724cb17c2b745d1d05ed86fbe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cors-semantic-release-sagitta-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122095
Malicious code in semantic-release-impulse-taurus-standard npm...
Malicious code in development-version-schema-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124612
Malicious code in nconf-commitizen-semantic-release-testcafe npm...
EUVD-2025-122089
Malicious code in semantic-release-process-alphard-commitizen npm...
EUVD-2025-120276
Malicious code in xenon-oberon-semantic-release-mysql npm...
EUVD-2025-115569
Malicious code in centauri-semantic-release-rehype-quark npm...
EUVD-2025-112070
Malicious code in juno-wasat-npm-semantic-release npm...