EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

EUVD-2025-116793

Malicious code in algol-semantic-release-umbriel-avior npm...

EUVD-2025-115823

Malicious code in cache-semantic-release-uninstall-hapi npm...

EUVD-2025-123840

Malicious code in perseus-elektra-spawn-semantic-release npm...

EUVD-2025-116317

Malicious code in avior-semantic-release-prettier-cz-conventional-changelog npm...

EUVD-2025-121447

Malicious code in taurus-semantic-release-auth0-castor npm...

Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111739

Malicious code in library-eleventy-start-semantic-release npm...

EUVD-2025-121771

Malicious code in spica-ceres-semantic-release-janus npm...

EUVD-2025-115549

Malicious code in centaurus-websockets-enceladus-semantic-release npm...

EUVD-2025-120211

Malicious code in xerxes-slides-semantic-release-gravity npm...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-112070

Malicious code in juno-wasat-npm-semantic-release npm...

EUVD-2025-114973

Malicious code in cors-semantic-release-eris-webdriverio npm...

Malicious code in semantic-release-cordelia-quark-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122102

Malicious code in semantic-release-backend-scripts-publish npm...

EUVD-2025-115569

Malicious code in centauri-semantic-release-rehype-quark npm...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-122095

Malicious code in semantic-release-impulse-taurus-standard npm...

EUVD-2025-111241

Malicious code in metalsmith-dagda-ganymede-semantic-release npm...