289 matches found
MAL-2025-146514 Malicious code in prettier-stylelint-odin-hexo-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111815
Malicious code in leda-tethys-webdriver-manager-hexo npm...
EUVD-2025-111553
Malicious code in loopback-sedna-vulcan-hexo npm...
EUVD-2025-115102
Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...
EUVD-2025-112761
Malicious code in hexo-sagitta-commitlint-halley npm...
Malicious code in yakutsk-airbnb-hexo-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3d1200b450aaccf441f8e19782c2d285ed44b037d7fef865e763c46c7b7d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114755
Malicious code in csv-pulsar-hexo-bunyan npm...
EUVD-2025-112757
Malicious code in hexo-zenith-cypress-europa npm...
Malicious code in hexo-json-auth-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in registry-barnard-hexo-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a0cb32bc739b4e12da3b97af7219a39e39d08684785a2f14222f4843f003da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123574
Malicious code in polaris-inquirer-hexo-figures npm...
EUVD-2025-112760
Malicious code in hexo-sails-element-ui-jsonp npm...
EUVD-2025-112775
Malicious code in hexo-changelog-sagitta-nconf npm...
EUVD-2025-115601
Malicious code in celeste-forever-bootstrap-hexo npm...
EUVD-2025-115244
Malicious code in colors-thuban-rest-hexo npm...
EUVD-2025-112759
Malicious code in hexo-sirius-karma-juno npm...
Malicious code in capella-hexo-subscription-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112774
Malicious code in hexo-child-process-chromedriver-jupiter npm...