EUVD-2025-112773

Malicious code in hexo-csrf-slides-install npm...

EUVD-2025-111505

Malicious code in lyra-hexo-elektra-acamar npm...

Malicious code in yakutsk-airbnb-hexo-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3d1200b450aaccf441f8e19782c2d285ed44b037d7fef865e763c46c7b7d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-hexo-process-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b50ef2bd3d40f3714e6f6d474a137cab45143d7cab9e3fee3d3b37879008f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122802

Malicious code in registry-barnard-hexo-io npm...

EUVD-2025-122527

Malicious code in restart-registry-proxima-hexo npm...

EUVD-2025-114755

Malicious code in csv-pulsar-hexo-bunyan npm...

MAL-2025-143337 Malicious code in hexo-changelog-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4530a5fd230ffc6615d6cacdc70a3aba46b71e960378c617d3a6f453067a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113213

Malicious code in gemini-hexo-blaze-slidev npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

EUVD-2025-112767

Malicious code in hexo-lacerta-colors-deneb npm...

EUVD-2025-115641

Malicious code in cassini-hexo-buffer-altair npm...

EUVD-2025-112769

Malicious code in hexo-iota-release-it-epimetheus npm...

EUVD-2025-120170

Malicious code in yakutsk-airbnb-hexo-elektra npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-122655

Malicious code in repository-hexo-vulcan-vuepress npm...

EUVD-2025-123575

Malicious code in polaris-hexo-process-scorpius npm...

EUVD-2025-112776

Malicious code in hexo-apollo-janus-pm2 npm...

EUVD-2025-111815

Malicious code in leda-tethys-webdriver-manager-hexo npm...

MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...