Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-166215 Malicious code in suharta-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6d0fca78e9d36fe89e7a0f878be8568f8490e27719b3310f5837b7302ac943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104161 Malicious code in indithas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad9579f1639c8bf6ecda02c0849bd0fdc2c56b7cb56e84c6607142596a47052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3692b3d7007c8bcdb300e02018dac3d4183e47d1c9a74554e3009d0635e310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...