286 matches found
EUVD-2025-112056
Malicious code in jupiter-hexo-nestjs-electron npm...
Malicious code in capella-hexo-subscription-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hexo-lacerta-colors-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92beecc19abe6bfce9c7df115923850d93afc41c66f1f3c1dbb2a385b4b63f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121673
Malicious code in standard-cressida-callback-hexo npm...
EUVD-2025-116643
Malicious code in antd-loglevel-sagitta-hexo npm...
EUVD-2025-113311
Malicious code in ganymede-hexo-gemini-winston npm...
EUVD-2025-112759
Malicious code in hexo-sirius-karma-juno npm...
EUVD-2025-124509
Malicious code in nextjs-changelog-hexo-polaris npm...
MAL-2025-147395 Malicious code in restart-registry-proxima-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143348 Malicious code in hexo-ora-quark-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112771
Malicious code in hexo-fetch-jwt-typeorm npm...
EUVD-2025-112760
Malicious code in hexo-sails-element-ui-jsonp npm...
MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143344 Malicious code in hexo-json-auth-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146346 Malicious code in polaris-hexo-process-scorpius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b50ef2bd3d40f3714e6f6d474a137cab45143d7cab9e3fee3d3b37879008f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142747 Malicious code in fusion-rollup-plugin-hexo-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c092b78544bb01f07823044707226632ad2b69882e54cca8f1837ec105bdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123408
Malicious code in prettier-stylelint-odin-hexo-init npm...
EUVD-2025-122600
Malicious code in resolvers-eleventy-hexo-altair npm...