MAL-2025-187356 Malicious code in hexo-restart-farout-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5247e16048caf71cba989ce7d7576f498fa66a44e6060ab73d416196f8e68e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187165 Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178531

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...

Malicious code in hexo-phenomic-odin-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178529

Malicious code in hexo-interstellarmedium-spinner-less npm...

EUVD-2025-177868

Malicious code in meteor-bulma-augmentedreality-hexo npm...

EUVD-2025-177132

Malicious code in playwright-phylogenetics-eigenstate-hexo npm...

EUVD-2025-175410

Malicious code in zephyr-local-hexo-meteor npm...

EUVD-2025-178530

Malicious code in hexo-duplex-xenos-bootstrap npm...

EUVD-2025-175791

Malicious code in upgrade-hexo-gulp-cosmogenic npm...

EUVD-2025-180068

Malicious code in biohacking-hexo-nebula-non-blocking npm...

EUVD-2025-175564

Malicious code in wezen-hexo-update-lithosphere npm...

EUVD-2025-178527

Malicious code in hexo-publish-hexo-xo npm...

EUVD-2025-177559

Malicious code in node-sass-slides-koa-hexo npm...

EUVD-2025-116914

Malicious code in acamar-toml-hexo-algol npm...

EUVD-2025-124092

Malicious code in ophiuchus-nashira-hexo-grunt npm...

Malicious code in cypress-hexo-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122236

Malicious code in sass-loader-zephyr-hexo-zephyr npm...

Malicious code in fornax-ultra-hexo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798bba0a24e636328917ac9af4ec78c91824e2867971dc0f5bf48e0c68e05189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-xerxes-hexo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bee7682159e35a1dafa0280eb0f77a2faf1bce8cfb3153057568a62d233ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...