289 matches found
Malicious code in hexo-shoka-swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f045b55721408d94a92f5d65b58d69c98d3dc29d5f4f9327fb8edb4f85eaad The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...
MAL-2026-6492 Malicious code in hexo-shoka-swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f045b55721408d94a92f5d65b58d69c98d3dc29d5f4f9327fb8edb4f85eaad The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...
Malicious code in hexo-deployer-wrangler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc95a6a1ae1e522feabf03446f9791372191e27ca9da454717559b6cc6948eb The package ships a binding.gyp file line 6 containing GYP command-expansion syntax !... inside the targets/sources fields. npm implicitly runs...
MAL-2026-6491 Malicious code in hexo-deployer-wrangler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc95a6a1ae1e522feabf03446f9791372191e27ca9da454717559b6cc6948eb The package ships a binding.gyp file line 6 containing GYP command-expansion syntax !... inside the targets/sources fields. npm implicitly runs...
EUVD-2025-175410
Malicious code in zephyr-local-hexo-meteor npm...
EUVD-2025-179188
Malicious code in elara-hexo-postgres-astrochemistry npm...
EUVD-2025-178530
Malicious code in hexo-duplex-xenos-bootstrap npm...
EUVD-2025-175791
Malicious code in upgrade-hexo-gulp-cosmogenic npm...
EUVD-2025-178717
Malicious code in geodynamo-stop-hexo-markdown-pdf npm...
EUVD-2025-178527
Malicious code in hexo-publish-hexo-xo npm...
EUVD-2025-178531
Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...
EUVD-2025-180068
Malicious code in biohacking-hexo-nebula-non-blocking npm...
Malicious code in dotenv-hexo-apollo-cryonics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178532
Malicious code in hexo-boson-charon-framework npm...
EUVD-2025-176275
Malicious code in spawn-scorpius-antares-hexo npm...
Malicious code in biohacking-hexo-nebula-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd86e632988c28863335fcedc47e5fe32a6ec91385c1a1eb92d971ee62381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177109
Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo npm...
EUVD-2025-179270
Malicious code in dotenv-hexo-apollo-cryonics npm...
Malicious code in hexo-phenomic-odin-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...