286 matches found
MAL-2025-186612 Malicious code in dotenv-hexo-apollo-cryonics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188306 Malicious code in node-config-hexo-version-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9b65b9b8c11b124be12acd58301b389aedba3ac28ad6ab66fcf6f4ac2a0a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hexo-phenomic-odin-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177132
Malicious code in playwright-phylogenetics-eigenstate-hexo npm...
EUVD-2025-178529
Malicious code in hexo-interstellarmedium-spinner-less npm...
EUVD-2025-177868
Malicious code in meteor-bulma-augmentedreality-hexo npm...
EUVD-2025-175410
Malicious code in zephyr-local-hexo-meteor npm...
EUVD-2025-178530
Malicious code in hexo-duplex-xenos-bootstrap npm...
EUVD-2025-175791
Malicious code in upgrade-hexo-gulp-cosmogenic npm...
EUVD-2025-180068
Malicious code in biohacking-hexo-nebula-non-blocking npm...
EUVD-2025-175564
Malicious code in wezen-hexo-update-lithosphere npm...
EUVD-2025-178527
Malicious code in hexo-publish-hexo-xo npm...
EUVD-2025-177559
Malicious code in node-sass-slides-koa-hexo npm...
EUVD-2025-116914
Malicious code in acamar-toml-hexo-algol npm...
EUVD-2025-113311
Malicious code in ganymede-hexo-gemini-winston npm...
EUVD-2025-116643
Malicious code in antd-loglevel-sagitta-hexo npm...
EUVD-2025-124092
Malicious code in ophiuchus-nashira-hexo-grunt npm...
Malicious code in cypress-hexo-publish-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...