MAL-2026-10155 Malicious code in notify-funcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b65341bde476af6b80e1fbaa9f9a844b7fdc023ef02f5fabb88514d88012159 The package presents itself as a pino-compatible logging middleware exports check as both default and pino named export but its actual behavior on...

MAL-2025-146225 Malicious code in pino-middleware-zephyr-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d06a3a7b8dcf2aafa9df282862719f4c6d00a49414d8b4e87a1b0f1b729ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123696

Malicious code in pino-middleware-zephyr-auth0 npm...

Malicious code in pino-middleware-zephyr-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d06a3a7b8dcf2aafa9df282862719f4c6d00a49414d8b4e87a1b0f1b729ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...