EUVD-2025-113310

Malicious code in ganymede-hugo-phoebe-nova npm...

EUVD-2025-124047

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova npm...

EUVD-2025-113582

Malicious code in flare-hugo-build-loopback npm...

EUVD-2025-111194

Malicious code in meteor-node-config-hugo-fomalhaut npm...

EUVD-2025-116118

Malicious code in betelgeuse-hugo-promise-envconfig npm...

EUVD-2025-112720

Malicious code in hugo-mira-node-sass-nashira npm...

EUVD-2025-113159

Malicious code in global-writable-hugo-yonder npm...

EUVD-2025-112703

Malicious code in hugo-yonder-bellatrix-mensa npm...

EUVD-2025-112709

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna npm...

Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115995

Malicious code in bootstrap-hugo-altair-rehype npm...

EUVD-2025-112717

Malicious code in hugo-neptune-mui-terser-webpack-plugin npm...

EUVD-2025-122155

Malicious code in sedna-hugo-webdriver-manager-centauri npm...

EUVD-2025-112818

Malicious code in hercules-server-achernar-hugo npm...

Malicious code in dependencies-hugo-phenomic-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115559

Malicious code in centaurus-protractor-pegasus-hugo npm...

EUVD-2025-114577

Malicious code in deneb-astro-xenon-hugo npm...

Malicious code in hugo-spectron-webdriver-oauth-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123019

Malicious code in quantum-hugo-markdown-pdf-registry npm...

Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...