286 matches found
EUVD-2025-112774
Malicious code in hexo-child-process-chromedriver-jupiter npm...
EUVD-2025-115244
Malicious code in colors-thuban-rest-hexo npm...
EUVD-2025-114466
Malicious code in dione-cluster-hexo-helios npm...
EUVD-2025-113285
Malicious code in ganymede-umbriel-hexo-writable npm...
EUVD-2025-114755
Malicious code in csv-pulsar-hexo-bunyan npm...
EUVD-2025-112773
Malicious code in hexo-csrf-slides-install npm...
EUVD-2025-111505
Malicious code in lyra-hexo-elektra-acamar npm...
EUVD-2025-111815
Malicious code in leda-tethys-webdriver-manager-hexo npm...
EUVD-2025-113213
Malicious code in gemini-hexo-blaze-slidev npm...
Malicious code in dagda-hydra-centaurus-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115717
Malicious code in capella-hexo-subscription-private npm...
Malicious code in yakutsk-airbnb-hexo-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3d1200b450aaccf441f8e19782c2d285ed44b037d7fef865e763c46c7b7d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122802
Malicious code in registry-barnard-hexo-io npm...
EUVD-2025-122600
Malicious code in resolvers-eleventy-hexo-altair npm...
EUVD-2025-115102
Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...
EUVD-2025-123575
Malicious code in polaris-hexo-process-scorpius npm...
EUVD-2025-112767
Malicious code in hexo-lacerta-colors-deneb npm...
Malicious code in hexo-sails-element-ui-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f497ce3381fb671b0eeca370a269ef78cb9604d6165313910b3d753c12db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...