MAL-2025-142317 Malicious code in event-mutation-commitizen-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b32949794d833bd6fd57a5723e080406ca3e2764c0bd31238063217658db91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-24085 Malicious code in juniper-violet-x6wa (npm)

The package juniper-violet-x6wa was found to contain malicious code...

Malicious Package

Overview @exabyte-io/code.js is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...