Malicious code in hexo-shoka-swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f045b55721408d94a92f5d65b58d69c98d3dc29d5f4f9327fb8edb4f85eaad The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...

MAL-2026-6492 Malicious code in hexo-shoka-swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f045b55721408d94a92f5d65b58d69c98d3dc29d5f4f9327fb8edb4f85eaad The package ships a binding.gyp whose sources field uses GYP command-expansion syntax !... at line 6. npm implicitly runs node-gyp rebuild whenever a...

Malicious code in hexo-deployer-wrangler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc95a6a1ae1e522feabf03446f9791372191e27ca9da454717559b6cc6948eb The package ships a binding.gyp file line 6 containing GYP command-expansion syntax !... inside the targets/sources fields. npm implicitly runs...

MAL-2026-6491 Malicious code in hexo-deployer-wrangler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc95a6a1ae1e522feabf03446f9791372191e27ca9da454717559b6cc6948eb The package ships a binding.gyp file line 6 containing GYP command-expansion syntax !... inside the targets/sources fields. npm implicitly runs...

EUVD-2025-175410

Malicious code in zephyr-local-hexo-meteor npm...

EUVD-2025-179188

Malicious code in elara-hexo-postgres-astrochemistry npm...

EUVD-2025-177132

Malicious code in playwright-phylogenetics-eigenstate-hexo npm...

EUVD-2025-178530

Malicious code in hexo-duplex-xenos-bootstrap npm...

EUVD-2025-175791

Malicious code in upgrade-hexo-gulp-cosmogenic npm...

EUVD-2025-178717

Malicious code in geodynamo-stop-hexo-markdown-pdf npm...

EUVD-2025-178527

Malicious code in hexo-publish-hexo-xo npm...

EUVD-2025-178705

Malicious code in global-cassini-hexo-flare npm...

EUVD-2025-178531

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...

EUVD-2025-180068

Malicious code in biohacking-hexo-nebula-non-blocking npm...

MAL-2025-185814 Malicious code in biohacking-hexo-nebula-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd86e632988c28863335fcedc47e5fe32a6ec91385c1a1eb92d971ee62381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187741 Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-hexo-apollo-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180275

Malicious code in async-command-farout-hexo npm...

EUVD-2025-178532

Malicious code in hexo-boson-charon-framework npm...

EUVD-2025-176275

Malicious code in spawn-scorpius-antares-hexo npm...