283 matches found
MAL-2025-187356 Malicious code in hexo-restart-farout-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5247e16048caf71cba989ce7d7576f498fa66a44e6060ab73d416196f8e68e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188306 Malicious code in node-config-hexo-version-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9b65b9b8c11b124be12acd58301b389aedba3ac28ad6ab66fcf6f4ac2a0a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175410
Malicious code in zephyr-local-hexo-meteor npm...
Malicious code in hexo-phenomic-odin-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178527
Malicious code in hexo-publish-hexo-xo npm...
EUVD-2025-177868
Malicious code in meteor-bulma-augmentedreality-hexo npm...
EUVD-2025-175564
Malicious code in wezen-hexo-update-lithosphere npm...
EUVD-2025-177132
Malicious code in playwright-phylogenetics-eigenstate-hexo npm...
EUVD-2025-177559
Malicious code in node-sass-slides-koa-hexo npm...
EUVD-2025-178529
Malicious code in hexo-interstellarmedium-spinner-less npm...
EUVD-2025-178530
Malicious code in hexo-duplex-xenos-bootstrap npm...
EUVD-2025-175791
Malicious code in upgrade-hexo-gulp-cosmogenic npm...
EUVD-2025-180068
Malicious code in biohacking-hexo-nebula-non-blocking npm...
EUVD-2025-114710
Malicious code in cypress-hexo-publish-fomalhaut npm...
EUVD-2025-116643
Malicious code in antd-loglevel-sagitta-hexo npm...
Malicious code in hexo-hugo-apollo-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16946d8f8da98f1687d1b1461a244ac238e04e289dfe13b355f2cdc196d724c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in capella-hexo-subscription-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116623
Malicious code in apex-hexo-europa-neptune npm...
Malicious code in fornax-ultra-hexo-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798bba0a24e636328917ac9af4ec78c91824e2867971dc0f5bf48e0c68e05189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...