289 matches found
EUVD-2025-114637
Malicious code in dagda-hydra-centaurus-hexo npm...
EUVD-2025-115717
Malicious code in capella-hexo-subscription-private npm...
EUVD-2025-112762
Malicious code in hexo-quantum-vuetify-update npm...
EUVD-2025-121217
Malicious code in toml-hexo-xml-capella npm...
Malicious code in antares-pavo-sagitta-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb91c966e9c686f36a11e9fc5d3120d55ab7e432bfe20b1f89bf8a88a5c7fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111505
Malicious code in lyra-hexo-elektra-acamar npm...
EUVD-2025-122802
Malicious code in registry-barnard-hexo-io npm...
MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143340 Malicious code in hexo-docusaurus-hexo-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e33b640cbe6d8a0219377af647a66311dca56b8b99abb4f6e3dfee5fc00123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141399 Malicious code in cypress-hexo-publish-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140508 Malicious code in celeste-hexo-auth-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146347 Malicious code in polaris-inquirer-hexo-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff789d9b33a4b8d655fffdf0ed25e9131f4504fd6990c2728d6ae90c17491c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147395 Malicious code in restart-registry-proxima-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113285
Malicious code in ganymede-umbriel-hexo-writable npm...
MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112765
Malicious code in hexo-norma-cygnus-child-process npm...
Malicious code in ganymede-umbriel-hexo-writable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d009dee3dfc15d5c2b97f41e178224d0f0c01bd4a77c68c903623372d3206c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2021-2565
Malware in sbrugna...