MAL-2025-131277 Malicious code in wawan-soto86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906de89c42b175959796e89b119aed1a7ad5ad7bb98fa3de105b8ce1463bf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package in sdfjghlkfjdshlkjdhsfg

All versions of sdfjghlkfjdshlkjdhsfg contain malicious code. The package is essentially a worm that fetches all packages owned by the user, adds a script to self-replicate as a preinstall script and publishes a new version. Recommendation Remove the package from your environment and ensure all...

GHSA-GCFC-MGG3-8J2C Malicious Package in sdfjghlkfjdshlkjdhsfg

All versions of sdfjghlkfjdshlkjdhsfg contain malicious code. The package is essentially a worm that fetches all packages owned by the user, adds a script to self-replicate as a preinstall script and publishes a new version. Recommendation Remove the package from your environment and ensure all...