3 matches found
Malicious code in historical-yellow-walrus (npm)
Source: amazon-inspector 1692a7b786128d2e1e701c77cb89879f06e9d08a068cf73cf9f21a12342c94ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
5.9AI score
SaveExploits0References2Affected Software1
Malicious Package
Overview historical-yellow-walrus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
9.8CVSS5.7AI score
SaveExploits0References2
20