MAL-2026-7440 Malicious code in winston-middleware (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2025-120728

Malicious code in vuepress-winston-middleware-sass-loader npm...

Malicious code in vuepress-winston-middleware-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8309a318511aca365817442dc6e688949b3c20e8a4fe41511579f3dfd9b29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...