EUVD-2025-113213

Malicious code in gemini-hexo-blaze-slidev npm...

EUVD-2025-120304

Malicious code in xanthus-hexo-scripts-prettier npm...

EUVD-2025-113247

Malicious code in geckodriver-hexo-node-config-element-ui npm...

EUVD-2025-124092

Malicious code in ophiuchus-nashira-hexo-grunt npm...

MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112056

Malicious code in jupiter-hexo-nestjs-electron npm...

EUVD-2025-112767

Malicious code in hexo-lacerta-colors-deneb npm...

Malicious code in hexo-lacerta-colors-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92beecc19abe6bfce9c7df115923850d93afc41c66f1f3c1dbb2a385b4b63f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sagitta-commitlint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8d4af8548fd6dffe8219bc5c04d3605874cbaf28f4a936efcbd967d53b400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-hexo-process-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b50ef2bd3d40f3714e6f6d474a137cab45143d7cab9e3fee3d3b37879008f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-hugo-apollo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16946d8f8da98f1687d1b1461a244ac238e04e289dfe13b355f2cdc196d724c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121182

Malicious code in tool-nodemon-hexo-restart npm...

EUVD-2025-122655

Malicious code in repository-hexo-vulcan-vuepress npm...

EUVD-2025-121054

Malicious code in uglify-js-hexo-zenobia-child-process npm...

EUVD-2025-121019

Malicious code in ultra-spica-yakutsk-hexo npm...

EUVD-2025-114710

Malicious code in cypress-hexo-publish-fomalhaut npm...

Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143344 Malicious code in hexo-json-auth-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...