MAL-2025-187386 Malicious code in hugo-nashira-boson-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178344

Malicious code in iota-hugo-mongoose-hapi npm...

MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187389 Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179460

Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command npm...

EUVD-2025-122469

Malicious code in rimraf-morgan-hugo-quark npm...

EUVD-2025-116501

Malicious code in ariel-zenobia-hugo-grunt npm...

EUVD-2025-113888

Malicious code in eslint-hugo-indus-process npm...

EUVD-2025-111497

Malicious code in lyra-wasat-hugo-nashira npm...

EUVD-2025-120770

Malicious code in virgo-hugo-vega-heka npm...

EUVD-2025-112566

Malicious code in impulse-hugo-hermes-tailwindcss npm...

Malicious code in ariel-zenobia-hugo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9c0bbfdb2f4db105e962a12099bc5ed6eacdad8927eaeb93adf91598749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112723

Malicious code in hugo-io-commitizen-shelljs npm...

Malicious code in deneb-astro-xenon-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30df2abcf22f557c7023e22a337b453c8f6233b50a59cb850d624a11cabd466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112489

Malicious code in init-hugo-markdownlint-hydra npm...

EUVD-2025-123045

Malicious code in pyxis-halley-hugo-unuk npm...

EUVD-2025-112726

Malicious code in hugo-dependencies-quantum-janus npm...

Malicious code in rimraf-morgan-hugo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a072eb34f9cbc9d7f1976d7bf811c57d791fdd1e5e63e36e842ed1b7936c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...