516 matches found
EUVD-2025-112721
Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...
EUVD-2025-114540
Malicious code in dependencies-hugo-phenomic-node-config npm...
EUVD-2025-112710
Malicious code in hugo-spectron-webdriver-oauth-husky npm...
MAL-2025-149159 Malicious code in virgo-hugo-vega-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c502d4249c975a4bab93ef877ebd30cc2c9b3b46eb73351f5d2bf350f758b9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141920 Malicious code in electron-hugo-link-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f100f8b5a13d11ccdf9de9d337b8202eda41ec541af1a521b3ae2e6fe73503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122266
Malicious code in sails-nodemon-apollo-hugo npm...
Malicious code in hugo-prompts-install-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112723
Malicious code in hugo-io-commitizen-shelljs npm...
EUVD-2025-113888
Malicious code in eslint-hugo-indus-process npm...
MAL-2025-148976 Malicious code in unuk-avior-hugo-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839196d865170098006bfe73c2f0b712556ad1866d1fe766fff1604973367032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146903 Malicious code in quantum-hugo-markdown-pdf-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143381 Malicious code in hugo-chalk-rigel-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122215
Malicious code in scorpius-deimos-hugo-csv npm...
EUVD-2025-112716
Malicious code in hugo-prompts-install-nodejs npm...
EUVD-2025-112712
Malicious code in hugo-semantic-ui-halley-blitz npm...