EUVD-2025-115930

Malicious code in buffer-stop-dynamo-docusaurus npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114433

Malicious code in docusaurus-rigel-child-process-iota npm...

MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144883 Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144272 Malicious code in leda-grus-bellatrix-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2a51ebbb849846453bc0fd4d1586326a1133e7270c457e0aa383d38414111b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143340 Malicious code in hexo-docusaurus-hexo-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e33b640cbe6d8a0219377af647a66311dca56b8b99abb4f6e3dfee5fc00123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145928 Malicious code in package-dorado-soap-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38f17b94afc1f0a49b05fdd81a89481ec54c066a14a193744a88e76b8944fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114434

Malicious code in docusaurus-repository-impulse-yakutsk npm...

EUVD-2025-122595

Malicious code in resolvers-init-ursa-docusaurus npm...

Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114429

Malicious code in docusaurus-taurus-ursa-loglevel npm...

MAL-2025-142613 Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148445 Malicious code in tailwindcss-janus-docusaurus-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e1c10d9dbb89f0b0f2583d0b24dcd813e2e7f27a7a12e0692a0fae4c81c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148177 Malicious code in spica-radiant-await-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9f9a3f881cb11fe0d8855419bcd6658ea71a4049938253b6e9edb76c72d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147121 Malicious code in registry-concurrently-hercules-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3ca3e3f6a93be7a3b7c1f73be13aa079cbd8125e49441cdda0d0fbe78b212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141676 Malicious code in docusaurus-rigel-child-process-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ad6fbdcb00165d7f66f057681a85b17f94200086933314c24754656ab7969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141667 Malicious code in docusaurus-hyperion-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5c61627e6280aedbdb49c22147e97245479a467b4b4bea6b57a4b6531be14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147065 Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...