MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111112

Malicious code in mira-aurora-jekyll-radiant npm...

EUVD-2025-122788

Malicious code in registry-server-jekyll-stream npm...

EUVD-2025-111406

Malicious code in markdown-pdf-umbriel-jekyll-io npm...

EUVD-2025-121490

Malicious code in tailwindcss-altair-pavo-jekyll npm...

EUVD-2025-111930

Malicious code in kinetic-redis-less-loader-jekyll npm...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140618 Malicious code in chakra-ui-jekyll-algol-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237ebfd128d365a85baec16de6eb6ccaef065fb763230f647aa7d58e3f3ad1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148010 Malicious code in slidev-nestjs-jekyll-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9b75a2d8edb5a8c369a000f920617aadcc6109b2c759632c6965551d4a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-0635

Malware in sbrugna...

EUVD-2018-0436

Malware in sbrugna...

xss

This is a web application for a free online web and mobile security class, Hacker101. The application is built using Jekyll, a static site generator, and is hosted on GitHub Pages. The site provides a variety of resources, including videos, resources, and a CTF Capture The Flag section. The...

Malicious code in puppeteer-saturnology-baryon-jekyll (npm)

The package puppeteer-saturnology-baryon-jekyll was found to contain malicious code...

Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

Malicious code in request-xerxes-orbit-jekyll (npm)

The package request-xerxes-orbit-jekyll was found to contain malicious code...

Malicious code in jekyll-spinner-barnard-non-blocking (npm)

The package jekyll-spinner-barnard-non-blocking was found to contain malicious code...