EUVD-2025-123555

Malicious code in polaris-shelljs-jekyll-sails npm...

EUVD-2025-123474

Malicious code in postgres-sails-jekyll-react-bootstrap npm...

EUVD-2025-123440

Malicious code in prettier-plugin-markdown-google-jekyll-dagda npm...

EUVD-2025-123132

Malicious code in publish-jekyll-miranda-exec npm...

EUVD-2025-123590

Malicious code in polaris-cordelia-jekyll-metalsmith npm...

EUVD-2025-112214

Malicious code in jekyll-castor-dependencies-nashira npm...

EUVD-2025-124225

Malicious code in nuxtjs-aurora-bellatrix-jekyll npm...

MAL-2025-148010 Malicious code in slidev-nestjs-jekyll-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9b75a2d8edb5a8c369a000f920617aadcc6109b2c759632c6965551d4a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144942 Malicious code in meteor-writable-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122788

Malicious code in registry-server-jekyll-stream npm...

EUVD-2025-122707

Malicious code in relay-zenobia-webdriver-mocha-jekyll npm...

EUVD-2025-112212

Malicious code in jekyll-delphinus-buffer-mensa npm...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

EUVD-2025-113836

Malicious code in europa-jekyll-xerxes-process npm...

Malicious code in xo-hermes-csv-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac54c4f56f565c7cc1577845904c3da765754c0aef53b6fda637b70bad32dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122882

Malicious code in rate-limiter-inquirer-helmet-jekyll npm...

EUVD-2025-122377

Malicious code in run-script-gulp-hydra-jekyll npm...

MAL-2025-144071 Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...