2 matches found
MAL-2025-138779 Malicious code in holy-orange-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b7228f85fdaae76010c05d469e84496256f1050173941e932fa7bc2926359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117323
Malicious code in holy-orange-lynx npm...