EUVD-2025-120057

Malicious code in zenobia-semantic-release-wolf-celeste npm...

Malicious code in development-version-schema-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113849

Malicious code in europa-config-semantic-release-aquarius npm...

EUVD-2025-124612

Malicious code in nconf-commitizen-semantic-release-testcafe npm...

EUVD-2025-122089

Malicious code in semantic-release-process-alphard-commitizen npm...

EUVD-2025-120276

Malicious code in xenon-oberon-semantic-release-mysql npm...

EUVD-2025-120787

Malicious code in version-mongoose-cors-semantic-release npm...

Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124358

Malicious code in nodejs-eris-izar-semantic-release npm...

EUVD-2025-121716

Malicious code in spinner-semantic-release-nuxtjs-polaris npm...

Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112060

Malicious code in jupiter-chromedriver-semantic-release-chai npm...

EUVD-2025-122098

Malicious code in semantic-release-fornax-xerxes-command npm...

Malicious code in semantic-release-native-server-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122086

Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...

EUVD-2025-122090

Malicious code in semantic-release-pavo-winston-xo npm...

EUVD-2025-121930

Malicious code in slides-semantic-release-auth-ursa npm...

EUVD-2025-122092

Malicious code in semantic-release-loglevel-mongoose-buffer npm...

EUVD-2025-122099

Malicious code in semantic-release-eslint-config-grus-capella npm...