Malicious code in xeprews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17facf9b3612b1338fbda61069db829317150a9e7dbcc38cf96abbee1baa29b2 xeprews is an Express typosquat whose package.json declares a preinstall lifecycle hook that runs curl...

MAL-2026-17247 Malicious code in exptredd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288357063a28e85e649fc37c747c724bd06ce09c16624f7b2cad3dc854296035 npm package [email protected] impersonates the express package: package.json copies express's description, author, repository, contributors, and...

Malicious code in exptredd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288357063a28e85e649fc37c747c724bd06ce09c16624f7b2cad3dc854296035 npm package [email protected] impersonates the express package: package.json copies express's description, author, repository, contributors, and...

Malicious code in exprdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd27ec488e87cd2e26c940ac161033475731708a3f2ae629c4a138275b520f9 [email protected] impersonates the express framework — package name, description, author, contributors, repository, homepage, and keywords are copied...