simple-git Node.js Code Execution

The vulnerability of the simple-git library on the Node.js software platform is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to remotely modify the configuration of the vulnerable software and execute arbitrary code...

Malicious code in hitachi-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6199b048cec9db9c2768dede4a27a935786129604b2a0ac952a9d8787fc91aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140605 Malicious code in chai-sedna-configstore-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db186b19b6b9034186b75352f2f8ba47791d89f3232c2472ed5c907aab10f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108157 Malicious code in rising_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...