286 matches found
MAL-2025-144057 Malicious code in jupiter-hexo-nestjs-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52307fbec88a4359738f1a4633c61900298bd8f2ce42dfa1b7e7cfc137ada7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tethys-non-blocking-hexo-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116903
Malicious code in achernar-hexo-betelgeuse-shelljs npm...
EUVD-2025-112038
Malicious code in jwt-gravity-europa-hexo npm...
EUVD-2025-112775
Malicious code in hexo-changelog-sagitta-nconf npm...
Malicious code in antares-pavo-sagitta-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antd-loglevel-sagitta-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74998325ae8c37749976304017144b18be96fb00d74ce19a8051c1a358bb1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115599
Malicious code in celeste-hexo-auth-ophiuchus npm...
EUVD-2025-112772
Malicious code in hexo-docusaurus-hexo-rimraf npm...
Malicious code in hexo-json-auth-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112763
Malicious code in hexo-procyon-neptune-spectron-webdriver npm...
Malicious code in hexo-csrf-slides-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114774
Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares npm...
EUVD-2025-124542
Malicious code in neptune-request-hexo-commitlint-config-angular npm...
EUVD-2025-111553
Malicious code in loopback-sedna-vulcan-hexo npm...
EUVD-2025-111987
Malicious code in kastra-phenomic-eridanus-hexo npm...
EUVD-2025-121054
Malicious code in uglify-js-hexo-zenobia-child-process npm...
EUVD-2025-112762
Malicious code in hexo-quantum-vuetify-update npm...