516 matches found
MAL-2025-143033 Malicious code in gridsome-auriga-hugo-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140378 Malicious code in capella-aether-hugo-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114b87d35b47d073d6ed470df9f820bdb04e3a4dfb72dc3c23d035f79c27096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144808 Malicious code in meissa-hugo-express-uninstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f53f1a83e397f83a68c0dfed9dd4061d4d7cc7f2c8481e9a6407b90d2c50a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143288 Malicious code in hercules-less-elektra-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-fornax-hugo-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hugo-cassini-gulp-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115163
Malicious code in commitizen-terser-hugo-markdown-pdf npm...
EUVD-2025-112818
Malicious code in hercules-server-achernar-hugo npm...
EUVD-2025-112729
Malicious code in hugo-chromedriver-koa-upgrade npm...
EUVD-2025-114577
Malicious code in deneb-astro-xenon-hugo npm...
EUVD-2025-112719
Malicious code in hugo-mira-xenon-adonis npm...
EUVD-2025-123127
Malicious code in publish-miranda-hugo-hermes npm...
EUVD-2025-115995
Malicious code in bootstrap-hugo-altair-rehype npm...
EUVD-2025-112732
Malicious code in hugo-cassini-gulp-flare npm...
EUVD-2025-113159
Malicious code in global-writable-hugo-yonder npm...
Malicious code in hugo-spectron-webdriver-oauth-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...