EUVD-2025-124035

Malicious code in ora-jekyll-nodejs-antd npm...

Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113764

Malicious code in exec-jekyll-redis-apollo npm...

EUVD-2025-112201

Malicious code in jekyll-proxima-titan-phoenix npm...

EUVD-2025-112299

Malicious code in janus-jekyll-parcel-dotenv-safe npm...

EUVD-2025-112209

Malicious code in jekyll-fetch-lyra-lint npm...

EUVD-2025-115483

Malicious code in chakra-ui-protractor-jekyll-protractor npm...

Malicious code in protractor-dactyl-nightmare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25eb547f2c0710a4ca734107b39b3538297761f961c0a01fdf10bf7fd50975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

Malicious code in xo-hermes-csv-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac54c4f56f565c7cc1577845904c3da765754c0aef53b6fda637b70bad32dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114404

Malicious code in dotenv-csv-jekyll-soap npm...

EUVD-2025-112207

Malicious code in jekyll-jasmine-firebase-leda npm...

EUVD-2025-112657

Malicious code in hydra-sails-jekyll-pm2 npm...

Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112202

Malicious code in jekyll-norma-markdown-pdf-heka npm...

MAL-2025-144942 Malicious code in meteor-writable-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148438 Malicious code in tailwindcss-altair-pavo-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86fe2b5c9951a31ac9bf3e5536a7fc468a21cb1dbdcb6e12a8e3f736aede389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144912 Malicious code in meteor-google-jekyll-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566a64039428cf1418221a4fac71c67096ccd2cc5667551d058f7fe3f6978c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...