EUVD-2025-122622

Malicious code in request-loglevel-webdriver-mocha-hugo npm...

EUVD-2025-112724

Malicious code in hugo-eslint-config-rimraf-nodejs npm...

EUVD-2025-112713

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-112714

Malicious code in hugo-rimraf-eslint-nightwatch npm...

EUVD-2025-120826

Malicious code in venus-avior-hugo-epimetheus npm...

EUVD-2025-113569

Malicious code in fomalhaut-hugo-rollup-plugin-concurrently npm...

EUVD-2025-122555

Malicious code in rest-sqlite-exec-hugo npm...

EUVD-2025-112926

Malicious code in hapi-jovian-hugo-umbriel npm...

MAL-2025-144808 Malicious code in meissa-hugo-express-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f53f1a83e397f83a68c0dfed9dd4061d4d7cc7f2c8481e9a6407b90d2c50a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-mira-node-sass-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c2ce75884a9a6585371f9a0621f88401c19a99cbc6608575c06f39381bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115437

Malicious code in changelog-hydra-hugo-ini npm...

EUVD-2025-120953

Malicious code in unuk-avior-hugo-perseus npm...

EUVD-2025-116776

Malicious code in alphard-hugo-enceladus-child-process npm...

EUVD-2025-112464

Malicious code in inquirer-hugo-jupiter-envconfig npm...

EUVD-2025-113370

Malicious code in fusion-non-blocking-hugo-commitlint npm...

EUVD-2025-112731

Malicious code in hugo-chalk-rigel-phoebe npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

EUVD-2025-115085

Malicious code in config-ganymede-hugo-magellan npm...

EUVD-2025-112728

Malicious code in hugo-cosmiconfig-hugo-canopus npm...

Malicious code in cross-env-fornax-hugo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...