2 matches found
MAL-2025-99238 Malicious code in aggregate_dragon_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b44d1913022a98c6949379c41efe677e0801455d9c7c78e7e4c55b5c0f86b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in whispering_fish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff98a54b67a7464088b089741a290c44f748994387ad56c37a1e00c3b2c15d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...