286 matches found
EUVD-2025-121217
Malicious code in toml-hexo-xml-capella npm...
EUVD-2025-124099
Malicious code in ophiuchus-janus-bunyan-hexo npm...
EUVD-2025-112764
Malicious code in hexo-ora-quark-loglevel npm...
EUVD-2025-113898
Malicious code in eslint-config-thuban-repository-hexo npm...
EUVD-2025-112775
Malicious code in hexo-changelog-sagitta-nconf npm...
Malicious code in antares-pavo-sagitta-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112757
Malicious code in hexo-zenith-cypress-europa npm...
EUVD-2025-114925
Malicious code in cosmiconfig-hexo-blitz-tethys npm...
EUVD-2025-112038
Malicious code in jwt-gravity-europa-hexo npm...
EUVD-2025-111987
Malicious code in kastra-phenomic-eridanus-hexo npm...
MAL-2025-143845 Malicious code in janus-xerxes-hexo-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee7682159e35a1dafa0280eb0f77a2faf1bce8cfb3153057568a62d233ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141335 Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e5940c3692e0184723af4b60b6ab2fc2f47716e729018664d180a463eb807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143339 Malicious code in hexo-csrf-slides-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140508 Malicious code in celeste-hexo-auth-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...