Malicious code in ursa-juno-nodejs-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-59046 interactive-git-checkout has Command Injection vulnerability

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

Malicious code in procyon-leda-nodejs-exec (npm)

The package procyon-leda-nodejs-exec was found to contain malicious code...

MAL-2025-29701 Malicious code in procyon-leda-nodejs-exec (npm)

The package procyon-leda-nodejs-exec was found to contain malicious code...