EUVD-2025-112394

Malicious code in iota-docusaurus-mdx-backend npm...

EUVD-2025-112227

Malicious code in javascript-pipe-docusaurus-nodemon npm...

EUVD-2025-112167

Malicious code in jovian-docusaurus-carpo-commitlint npm...

EUVD-2025-112142

Malicious code in json-docusaurus-cosmiconfig-deimos npm...

EUVD-2025-111847

Malicious code in leda-docusaurus-dactyl-ignite npm...

EUVD-2025-111841

Malicious code in leda-grus-bellatrix-docusaurus npm...

EUVD-2025-111821

Malicious code in leda-scorpius-fusion-docusaurus npm...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-antares-cypress-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12401abdd6696590c451a00c53def2189764e175e258790027796fbdfd9a1148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-link-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf53415e9f10305beaf2b54e9ce0a7c6366a569421ee472d7e8ca4af9e4d382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-eslint-config-telesto-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6b3b8afa60d7366eb009f4ec27b46798e82d8153856f9a70813f982fee90a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-package-odin-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80c72158c29c094f5a17f94d21f9bc8882f4f430bea81bbd357f33a021a4a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-repository-impulse-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b041baa180dd909147d42e4b74573836fe84449fd82cc2c1c5dd75ed722833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-rigel-child-process-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ad6fbdcb00165d7f66f057681a85b17f94200086933314c24754656ab7969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-standard-octans-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce696e337acc344dbc20869ec37f18b2657aed732d85508686a22c668e34f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-centauri-docusaurus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6888c4ce290373de142d4cf67f685e39935cd011f692270694a1c042724e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-concurrently-docusaurus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbf361ff79d614937c5e79c19ccc23d0269f3eaa2444951bf67b2d12ac16cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...