MAL-2025-145893 Malicious code in ora-quito-grus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145046 Malicious code in miranda-ora-module-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077e367486e2a4787501d8b63a9626d4156f7042a3a1e0eeb4d8f6bb6cf4bfc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145885 Malicious code in ora-hyperion-websockets-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca76291d113540f0d1d9604ebedb3d9c349de49debb0c7a3d328fa724a726cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145892 Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145884 Malicious code in ora-halley-equinox-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17eefaa0049e9ad89efa16d16def14a0dcafe1a3cb50d8e977ad7885dd1feb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143701 Malicious code in io-nestjs-ora-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c77f7e73b40dd673a983113e9fab42f1f437734bcec372c58f95bdab19c231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111414

Malicious code in markdown-pdf-ora-despina-pegasus npm...

Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-ora-polaris-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fb3d2b6cc8472f5b6a43dd86e1ce3f8fd4d3aaba4f83deca9ca99ee64f6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113995

Malicious code in equinox-acamar-ora-ultra npm...

EUVD-2025-124027

Malicious code in ora-react-bootstrap-development-cressida npm...

EUVD-2025-112412

Malicious code in io-nestjs-ora-wezen npm...

EUVD-2025-124039

Malicious code in ora-eslint-config-gemini-epimetheus npm...

EUVD-2025-124036

Malicious code in ora-hyperion-websockets-chromedriver npm...

EUVD-2025-124044

Malicious code in ora-aquarius-typeorm-electron npm...

Malicious code in private-ora-react-bootstrap-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f70d86f10e498a68c8467eb0549e813ea9e7d89fa7faabb6bde280ca072604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114380

Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...

Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...