MAL-2025-186608 Malicious code in dorado-jest-gatsby-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9de4e8e9dafb88bdd63a361c5362004e17237ed4fcee7acb6bc660c15eecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186820 Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188825 Malicious code in private-dorado-grunt-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f11eb7d0cf109b91dbe253864f2c5180d4dd0f625e3fc93c690844a23ac0b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112999

Malicious code in gulp-celeste-celeste-dorado npm...

EUVD-2025-120171

Malicious code in xo-xo-dorado-despina npm...

EUVD-2025-114424

Malicious code in dorado-comet-cypress-ursa npm...

EUVD-2025-111483

Malicious code in magellan-dorado-puppeteer-gatsby npm...

EUVD-2025-115412

Malicious code in chariklo-dorado-ganymede-ursa npm...

EUVD-2025-123580

Malicious code in polaris-flare-wezen-dorado npm...

EUVD-2025-111973

Malicious code in kaus-dorado-hyperion-ursa npm...

EUVD-2025-112308

Malicious code in janus-dorado-repository-soap npm...

Malicious code in dorado-comet-cypress-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4ba604da581956023e5d77c8441370bd30f016f61f6bb550684dbc237e573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-121271

Malicious code in thuban-neptune-hexo-dorado npm...

EUVD-2025-123611

Malicious code in pm2-reveal-md-neptune-dorado npm...

Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116248

Malicious code in babel-dorado-firebase-readable npm...

EUVD-2025-113838

Malicious code in europa-indus-dorado-node-config npm...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...