2 matches found
MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-111254 Malicious code in yawning_hawk-gooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668ba7c8e3fd0183191a1df73d9ffea1642f7e8627673871652415fd7e16732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...