EUVD-2025-116903

Malicious code in achernar-hexo-betelgeuse-shelljs npm...

EUVD-2025-112268

Malicious code in janus-xerxes-hexo-leda npm...

Malicious code in janus-xerxes-hexo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee7682159e35a1dafa0280eb0f77a2faf1bce8cfb3153057568a62d233ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-loglevel-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74998325ae8c37749976304017144b18be96fb00d74ce19a8051c1a358bb1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122236

Malicious code in sass-loader-zephyr-hexo-zephyr npm...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112768

Malicious code in hexo-json-auth-vuepress npm...

EUVD-2025-124509

Malicious code in nextjs-changelog-hexo-polaris npm...

EUVD-2025-124796

Malicious code in mongodb-csv-hexo-kronos npm...

EUVD-2025-112766

Malicious code in hexo-mocha-carpo-element-ui npm...

EUVD-2025-114637

Malicious code in dagda-hydra-centaurus-hexo npm...

EUVD-2025-115717

Malicious code in capella-hexo-subscription-private npm...

EUVD-2025-112762

Malicious code in hexo-quantum-vuetify-update npm...

EUVD-2025-121217

Malicious code in toml-hexo-xml-capella npm...

Malicious code in antares-pavo-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111505

Malicious code in lyra-hexo-elektra-acamar npm...

EUVD-2025-122802

Malicious code in registry-barnard-hexo-io npm...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141399 Malicious code in cypress-hexo-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140508 Malicious code in celeste-hexo-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...