2 matches found
Malicious code in dotenv-csv-jekyll-soap (npm)
Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
5.9AI score
SaveExploits0References2Affected Software1
20