EUVD-2025-114757

Malicious code in csv-ora-relay-canopus npm...

EUVD-2025-124794

Malicious code in mongodb-cz-conventional-changelog-ora-tethys npm...

EUVD-2025-111758

Malicious code in levels-levels-ora-package npm...

EUVD-2025-111564

Malicious code in loopback-gemini-bellatrix-ora npm...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-link-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf53415e9f10305beaf2b54e9ce0a7c6366a569421ee472d7e8ca4af9e4d382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113015

Malicious code in grus-ora-cosmiconfig-cluster npm...

EUVD-2025-112764

Malicious code in hexo-ora-quark-loglevel npm...

EUVD-2025-113995

Malicious code in equinox-acamar-ora-ultra npm...

EUVD-2025-114462

Malicious code in dione-ora-sequelize-rocket npm...

EUVD-2025-115804

Malicious code in callback-ora-perseus-sadr npm...

EUVD-2025-115797

Malicious code in callback-pyxis-jovian-ora npm...

EUVD-2025-116447

Malicious code in atlas-radiant-sirius-ora npm...

Malicious code in module-ora-polaris-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fb3d2b6cc8472f5b6a43dd86e1ce3f8fd4d3aaba4f83deca9ca99ee64f6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-ora-react-bootstrap-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f70d86f10e498a68c8467eb0549e813ea9e7d89fa7faabb6bde280ca072604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...