2 matches found
Malicious code in sedna-postcss-gravity-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122136
Malicious code in sedna-postcss-gravity-lacerta npm...