EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-114739

Malicious code in cygnus-ini-duplex-eris npm...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...