286 matches found
MAL-2025-146514 Malicious code in prettier-stylelint-odin-hexo-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tethys-non-blocking-hexo-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hexo-json-auth-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111553
Malicious code in loopback-sedna-vulcan-hexo npm...
Malicious code in hexo-csrf-slides-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120462
Malicious code in wezen-scripts-virgo-hexo npm...
EUVD-2025-121217
Malicious code in toml-hexo-xml-capella npm...
EUVD-2025-124099
Malicious code in ophiuchus-janus-bunyan-hexo npm...
EUVD-2025-112764
Malicious code in hexo-ora-quark-loglevel npm...
Malicious code in antares-pavo-sagitta-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116181
Malicious code in bellatrix-aldebaran-hexo-prettier npm...
EUVD-2025-115599
Malicious code in celeste-hexo-auth-ophiuchus npm...
EUVD-2025-112766
Malicious code in hexo-mocha-carpo-element-ui npm...
Malicious code in registry-barnard-hexo-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a0cb32bc739b4e12da3b97af7219a39e39d08684785a2f14222f4843f003da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116903
Malicious code in achernar-hexo-betelgeuse-shelljs npm...
EUVD-2025-123574
Malicious code in polaris-inquirer-hexo-figures npm...
EUVD-2025-112772
Malicious code in hexo-docusaurus-hexo-rimraf npm...
EUVD-2025-112763
Malicious code in hexo-procyon-neptune-spectron-webdriver npm...