Malicious code in tropical_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18d1f64c9aeeffe2fe0f5da96e150e3a4212b4c91c57b6ca2c01c2e333af788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109136 Malicious code in still_stoat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b539fbd2a1c956165e9a7dbd51155cf3a955111186e5f25637b8c0e876f6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e74742408b0b192c0dec0a4cb1dd8d8d7c0659fe811e8ad80ae66af65448f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in i18n_sonder (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f0c939067907bb4e3bd0d91530b128f2ffe8c595d619eaa3ab544891de51e2b The OpenSSF Package Analysis project identified 'i18nsonder' @ 4.1.0 rubygems as malicious. It is considered malicious because: - The package...