EUVD-2025-114471

Malicious code in development-version-schema-semantic-release npm...

EUVD-2025-112582

Malicious code in ignite-terser-semantic-release-exec npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-115022

Malicious code in convict-rate-limiter-semantic-release-cypress npm...

Malicious code in vega-semantic-release-vuepress-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3096fc25365fb83f829e2fa85f1c9ae852b143d97925c1584e978adfb786f01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123152

Malicious code in public-supervisor-semantic-release-rate-limiter npm...

Malicious code in semantic-release-apollo-pyxis-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122093

Malicious code in semantic-release-janus-pyxis-electron npm...

EUVD-2025-122104

Malicious code in semantic-release-apollo-pyxis-changelog npm...

EUVD-2025-115823

Malicious code in cache-semantic-release-uninstall-hapi npm...

Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111739

Malicious code in library-eleventy-start-semantic-release npm...

Malicious code in semantic-release-cordelia-quark-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50680f919fe9aff53eb74b983d54d279ceb281794aac8d2eb9288a30f7f6b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122101

Malicious code in semantic-release-bunyan-enif-zephyr npm...

EUVD-2025-122443

Malicious code in rocket-semantic-release-spectron-polaris npm...

EUVD-2025-120831

Malicious code in vega-semantic-release-vuepress-venus npm...

EUVD-2025-121686

Malicious code in sqlite-semantic-release-chariklo-mysql npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

EUVD-2025-122131

Malicious code in sedna-semantic-release-gridsome-janus npm...

EUVD-2025-115569

Malicious code in centauri-semantic-release-rehype-quark npm...