MAL-2025-140438 Malicious code in carpo-docusaurus-run-script-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0005827d3b1e3675599308fd06a392bc52127f29e3a5222522c49438e4e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140077 Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141683 Malicious code in docusaurus-yakutsk-library-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cc955078d2d189443442f8b28c1372e8bb5fdb1f7c9bd068b7f834de3731e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-20874

Malicious code in bioql PyPI...

Malicious code in docusaurus-supervisor-eris-axios (npm)

The package docusaurus-supervisor-eris-axios was found to contain malicious code...

Malicious code in venus-winston-docusaurus-aquarius (npm)

The package venus-winston-docusaurus-aquarius was found to contain malicious code...

Malicious code in docusaurus-palynology-hermes-tectonic (npm)

The package docusaurus-palynology-hermes-tectonic was found to contain malicious code...

Malicious code in csv-astroinformatics-docusaurus-speleology (npm)

The package csv-astroinformatics-docusaurus-speleology was found to contain malicious code...

Malicious code in frontend-equinox-docusaurus-semantic-release (npm)

The package frontend-equinox-docusaurus-semantic-release was found to contain malicious code...

MAL-2025-44339 Malicious code in frontend-equinox-docusaurus-semantic-release (npm)

The package frontend-equinox-docusaurus-semantic-release was found to contain malicious code...

MAL-2025-44030 Malicious code in docusaurus-palynology-hermes-tectonic (npm)

The package docusaurus-palynology-hermes-tectonic was found to contain malicious code...

MAL-2025-44031 Malicious code in docusaurus-supervisor-eris-axios (npm)

The package docusaurus-supervisor-eris-axios was found to contain malicious code...

MAL-2025-46499 Malicious code in venus-winston-docusaurus-aquarius (npm)

The package venus-winston-docusaurus-aquarius was found to contain malicious code...

MAL-2025-43914 Malicious code in csv-astroinformatics-docusaurus-speleology (npm)

The package csv-astroinformatics-docusaurus-speleology was found to contain malicious code...

Malicious code in docusaurus-transform-achernar-cosmos (npm)

The package docusaurus-transform-achernar-cosmos was found to contain malicious code...

Malicious code in docusaurus-typeorm-jwt-gacrux (npm)

The package docusaurus-typeorm-jwt-gacrux was found to contain malicious code...

Malicious code in less-loader-colors-nashira-docusaurus (npm)

The package less-loader-colors-nashira-docusaurus was found to contain malicious code...

Malicious code in loglevel-astro-docusaurus-adonis (npm)

The package loglevel-astro-docusaurus-adonis was found to contain malicious code...