Malicious code in dewi-rangginang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095c7f84679c2af0585202dcfc5b6763ce192ec3037e870bbafe4043c521ecb8 The package dewi-rangginang7-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tiara-tempe32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9a9a69fdab1566eccfc53f327b132c17a55741a1d41b38c124ca30483be0 The package tiara-tempe32-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-10894

CVE-2025-10894 describes malicious versions of the Nx build system and related plugins published on the npm registry via a supply-chain attack. Affected packages contain code that scans the filesystem, collects credentials, and posts them to GitHub under the user’s account. The CVSSv3.1 base scor...