0xegg2024@1.0.2: Malicious npm security report (Block)

OSV Malicious Advisory

scanned 21d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-3668 confirms this npm version as malicious. Tea.yaml token farming campaign

Advisory

MAL-2026-3668

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in 0xegg2024 (npm)

Details

Tea.yaml token farming campaign

Decision reason

OSV/OpenSSF confirms 0xegg2024@1.0.2 as malicious package MAL-2026-3668. Malicious code in 0xegg2024 (npm)

References

0 flagged

No flagged code excerpts are attached to this scan.

0 flagged · loading source

No flagged code excerpts are attached to this scan.

1 High

HighOsv Malicious Advisory