202 matches found
MAL-2025-145892 Malicious code in ora-postcss-dotenv-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143701 Malicious code in io-nestjs-ora-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c77f7e73b40dd673a983113e9fab42f1f437734bcec372c58f95bdab19c231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141647 Malicious code in dione-ora-sequelize-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07109008f9aa8133cb5246752aa0535329fee8a3c29eb8983fef92f9a8399b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139593 Malicious code in ariel-ora-farout-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145885 Malicious code in ora-hyperion-websockets-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca76291d113540f0d1d9604ebedb3d9c349de49debb0c7a3d328fa724a726cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145893 Malicious code in ora-quito-grus-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113015
Malicious code in grus-ora-cosmiconfig-cluster npm...
Malicious code in dagda-ora-vortex-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122140
Malicious code in sedna-pavo-mocha-ora npm...
EUVD-2025-112764
Malicious code in hexo-ora-quark-loglevel npm...
EUVD-2025-124021
Malicious code in ora-yaml-yildun-node-sass npm...
EUVD-2025-116921
Malicious code in acamar-ora-vega-triton npm...
EUVD-2025-124891
Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora npm...
Malicious code in hydra-ora-npm-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce129e7fe90819908be64c2e70320963d6105ab17830b4acdbfc7c9331e54f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114896
Malicious code in cosmos-ora-draco-version npm...
EUVD-2025-114629
Malicious code in dagda-ora-vortex-rigel npm...
EUVD-2025-120219
Malicious code in xerxes-ora-neptune-dotenv npm...
Malicious code in perseus-ora-non-blocking-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72234f1311d1f62cd8d227441dd0e05d6145857f9cf50b8d867c692c33ba1a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...