EUVD-2025-112724

Malicious code in hugo-eslint-config-rimraf-nodejs npm...

EUVD-2025-122215

Malicious code in scorpius-deimos-hugo-csv npm...

EUVD-2025-122622

Malicious code in request-loglevel-webdriver-mocha-hugo npm...

EUVD-2025-115437

Malicious code in changelog-hydra-hugo-ini npm...

MAL-2025-144808 Malicious code in meissa-hugo-express-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f53f1a83e397f83a68c0dfed9dd4061d4d7cc7f2c8481e9a6407b90d2c50a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112967

Malicious code in halley-hugo-node-config-helmet npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

EUVD-2025-112713

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

MAL-2025-143033 Malicious code in gridsome-auriga-hugo-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143288 Malicious code in hercules-less-elektra-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147656 Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140378 Malicious code in capella-aether-hugo-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114b87d35b47d073d6ed470df9f820bdb04e3a4dfb72dc3c23d035f79c27096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115163

Malicious code in commitizen-terser-hugo-markdown-pdf npm...

EUVD-2025-116599

Malicious code in apollo-cypress-hugo-capella npm...

EUVD-2025-123922

Malicious code in pavo-hugo-winston-iota npm...

Malicious code in hugo-cassini-gulp-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-io-commitizen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14422502a986da3f3e8a3e58d27382f380fdb312eedf3d04e62baee24a4dcd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...