MAL-2026-10772 Malicious code in axios-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...

Malicious code in axios-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d01cf6414d6896b4f60ac6e2ecc238d33c049b6f6f5add44bd7700de32a906 The package presents itself as a drop-in replacement for axios identical name shape, README, and API but adds a top-level import of a separate npm...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

Malicious code in axios-native-concurrently-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859eb00c4af130b26cb5ce79f6eba7269c3381cfbba2c0655acbeb56b2e3e2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...