EUVD-2025-122637

Malicious code in repository-webpack-hugo-impulse npm...

EUVD-2025-112708

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...

EUVD-2025-112489

Malicious code in init-hugo-markdownlint-hydra npm...

EUVD-2025-123813

Malicious code in perseus-procyon-hugo-ophiuchus npm...

EUVD-2025-123539

Malicious code in postcss-chalk-cassini-hugo npm...

Malicious code in deneb-astro-xenon-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30df2abcf22f557c7023e22a337b453c8f6233b50a59cb850d624a11cabd466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116476

Malicious code in async-hugo-yaml-rimraf npm...

EUVD-2025-113075

Malicious code in gridsome-dependencies-hugo-ganymede npm...

EUVD-2025-114856

Malicious code in cross-env-fornax-hugo-quito npm...

EUVD-2025-113888

Malicious code in eslint-hugo-indus-process npm...

EUVD-2025-112726

Malicious code in hugo-dependencies-quantum-janus npm...

EUVD-2025-124597

Malicious code in nconf-pm2-betelgeuse-hugo npm...

EUVD-2025-122469

Malicious code in rimraf-morgan-hugo-quark npm...

MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-hugo-apollo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16946d8f8da98f1687d1b1461a244ac238e04e289dfe13b355f2cdc196d724c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112711

Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin npm...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

EUVD-2025-112770

Malicious code in hexo-hugo-apollo-kronos npm...

Malicious code in rimraf-morgan-hugo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a072eb34f9cbc9d7f1976d7bf811c57d791fdd1e5e63e36e842ed1b7936c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...