EUVD-2025-122155

Malicious code in sedna-hugo-webdriver-manager-centauri npm...

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6530f326f3a9376699cc3340f33a0ee974cd41b8673b2e9ce2bf4aacce3bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112703

Malicious code in hugo-yonder-bellatrix-mensa npm...

EUVD-2025-113582

Malicious code in flare-hugo-build-loopback npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

EUVD-2025-116118

Malicious code in betelgeuse-hugo-promise-envconfig npm...

EUVD-2025-123199

Malicious code in proxima-mdx-hugo-draco npm...

EUVD-2025-123519

Malicious code in postcss-loader-nightwatch-hugo-tethys npm...

EUVD-2025-112363

Malicious code in iota-wezen-sqlite-hugo npm...

EUVD-2025-123163

Malicious code in public-gatsby-figures-hugo npm...

EUVD-2025-112720

Malicious code in hugo-mira-node-sass-nashira npm...

Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111194

Malicious code in meteor-node-config-hugo-fomalhaut npm...

EUVD-2025-122473

Malicious code in rimraf-dotenv-safe-wasat-hugo npm...

EUVD-2025-116836

Malicious code in airbnb-vortex-lint-hugo npm...

EUVD-2025-112717

Malicious code in hugo-neptune-mui-terser-webpack-plugin npm...

MAL-2025-143395 Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143393 Malicious code in hugo-mira-xenon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7a07bb677957e70e2e949bba1c9e54ec32c7b5400c60f5cab5c2aa33b223c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143547 Malicious code in impulse-hugo-hermes-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1214df154058bf8b9ff26ea1d90732fb3d0d8f7a49008ca86fb3a19a49be8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146382 Malicious code in postcss-chalk-cassini-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd5f2d5d3d3bf33c23a3ca41571ccc6d77668f774fa2b3c8985024b5ed6051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...