MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-18583 Malicious code in docusaurus-transform-achernar-cosmos (npm)

The package docusaurus-transform-achernar-cosmos was found to contain malicious code...

Malicious code in docusaurus-1-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bc26a18dac583742540fbd6f173d127c241dfaf1353d984ab8c5bd62d8d3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...