Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/17 8:17 a.m.•8 views

Malicious Package

Overview layla-poke38 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in layla-poke38 (npm)

Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 4:47 p.m.•10 views

Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
Rows per page
Query Builder