2 matches found
Malicious code in leda-nodejs-nextjs-sirius (npm)
Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
5.9AI score
SaveExploits0References3Affected Software1
Malicious Package
Overview leda-nodejs-nextjs-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
9.8CVSS5.8AI score
SaveExploits0References2
20