309 matches found
MAL-2025-190924 Malicious code in posthog-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317ab9fe546aa6930bf7fb3ee7c35c737d56963b41a4f3d4363abdb0ebfbfa49 The package posthog-docusaurus was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198903
Malicious code in posthog-docusaurus npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in avior-nconf-docusaurus-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e372bcd590d5a3c84d04776d2d75c70dbaafb5b84fc80e7175926fce4f9bb7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-umbra-webdriver-mocha-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314812afef770b2c68933860419ecd93f198f59bd1b7fbef389f9ff3aeb0ab01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bd97b8e1ec351f3c30094833234126ca837fa785a420b0c9ef4ae12a84d81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in docusaurus-xml-proxima-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4841cb7fbba4912212b6867a9ab9667021ec18b4781ff0fe00923b7377062a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mutation-docusaurus-scorpius-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f6271538fff9b9ee158666dd6bcb5e2c1ffc3f2da26a8a7cfa3a22b2286e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-procyon-stream-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in orbit-html-webpack-plugin-xml-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fb8c907f7e235373242f869cd54f573229f75943e3b713df6ab822fa2142e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176312
Malicious code in sociobiology-promise-spinner-docusaurus npm...
EUVD-2025-175990
Malicious code in test-on-spinner-docusaurus npm...
EUVD-2025-175927
Malicious code in toml-jwt-docusaurus-celeste npm...
EUVD-2025-177769
Malicious code in mongoose-docusaurus-fomalhaut-oauth npm...
EUVD-2025-177730
Malicious code in mutation-docusaurus-scorpius-centauri npm...
EUVD-2025-177705
Malicious code in native-docusaurus-xerxes-unuk npm...
EUVD-2025-177590
Malicious code in nightwatch-procyon-stream-docusaurus npm...
EUVD-2025-177432
Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...