4 matches found
MAL-2025-149491 Malicious code in winston-eslint-config-impulse-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28014350609d845e34791b1fe1bba9b422e05f529a3222c889802154906250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120438
Malicious code in winston-eslint-plugin-quark-sagitta npm...
Malicious code in winston-eslint-plugin-quark-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706839edf2b666a4f9ca7c829230ca1869eada44401afc05d260eec76ec24e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...