MAL-2025-123641 Malicious code in tomi-lodeh73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b8d0873453a9d8d5ea3d0958cd6ea30f8e21332c4019b378396dd5f27bc494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Man-in-the-Middle (MitM)

moneta is vulnerable to man-in-the-middle attacks. The package resolves package dependencies via an insecure HTTP channel, allowing an attacker in the network to modify package contents during build...