EUVD-2025-112933

Malicious code in hapi-commitizen-update-semantic-release npm...

EUVD-2025-121686

Malicious code in sqlite-semantic-release-chariklo-mysql npm...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

EUVD-2025-124539

Malicious code in neptune-stop-semantic-release-nestjs npm...

EUVD-2025-120057

Malicious code in zenobia-semantic-release-wolf-celeste npm...

EUVD-2025-123404

Malicious code in prettier-stylelint-semantic-release-concurrently-vega npm...

EUVD-2025-122084

Malicious code in semantic-release-update-kronos-rest npm...

EUVD-2025-123152

Malicious code in public-supervisor-semantic-release-rate-limiter npm...

MAL-2025-147836 Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123840

Malicious code in perseus-elektra-spawn-semantic-release npm...

MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147833 Malicious code in semantic-release-pavo-winston-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79981c099c9d1ef7e0a447288b3f3a95d5de7a9bf8ba48b90112ecf212dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148239 Malicious code in sqlite-semantic-release-chariklo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a70877cf6fc7144944e3d17633b64feec401c7798f2edb05735691b1437526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122087

Malicious code in semantic-release-sails-webdriver-mocha-npm npm...

Malicious code in restart-xanadu-warp-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef6a6937beac37bffe0da97267ff730eeaff6a6a16415d03fc4bc0e4647f464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...