EUVD-2025-175650

Malicious code in warp-ora-duplex-jekyll npm...

EUVD-2025-179987

Malicious code in borealis-hercules-ora-lyra npm...

EUVD-2025-175562

Malicious code in wezen-mutation-ora-grunt npm...

MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112664

Malicious code in hydra-ora-npm-nashira npm...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114970

Malicious code in cors-slidev-leda-ora npm...

EUVD-2025-114506

Malicious code in despina-ora-jekyll-neptune npm...

EUVD-2025-124794

Malicious code in mongodb-cz-conventional-changelog-ora-tethys npm...

EUVD-2025-116447

Malicious code in atlas-radiant-sirius-ora npm...

Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124043

Malicious code in ora-bellatrix-global-sequelize npm...

EUVD-2025-122830

Malicious code in readable-sqlite-lint-staged-ora npm...

Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-ora-vega-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b0f79c6c7a65015199c428f57766f8fa019a08ff82312fb75852a65c8e402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124040

Malicious code in ora-electron-builder-postcss-umbra npm...

EUVD-2025-124031

Malicious code in ora-perseus-quark-meteor npm...

EUVD-2025-124041

Malicious code in ora-draco-phoebe-odin npm...

Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-ora-cosmiconfig-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282f367d8ffce9fba5957d1107c8acf3b5511b53016db1fdb4deee2afdccbfe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...