Embedded Malicious Code

Overview @jagreehal/workflow is a Typed async workflows with automatic error inference. Build type-safe workflows with Result types, step caching, resume state, and human-in-the-loop support. Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious...

Malicious code in nabuf-otimmn-afofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051597a7caa0c84dad2b37d6263d5778b6daa137c45162f4758f16e66ad9300b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170458 Malicious code in verify-tactiva-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26451fdbaf8a06659a2290f3cc6d3659144909b500492037023b7ff85f52589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...