Malicious code in dewi-rangginang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095c7f84679c2af0585202dcfc5b6763ce192ec3037e870bbafe4043c521ecb8 The package dewi-rangginang7-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

CVE-2025-10894

CVE-2025-10894 describes malicious versions of the Nx build system and related plugins published on the npm registry via a supply-chain attack. Affected packages contain code that scans the filesystem, collects credentials, and posts them to GitHub under the user’s account. The CVSSv3.1 base scor...