MAL-2025-185080 Malicious code in sonic-ks-ahagafujihuajafdha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af57ef0c045cd51aecfae13fae526fe3c034fd0b65a3349b9737858a2e1846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f37d7acd9c51030713ab601cd0a9b42c4a1988c3b8760988c8975be05db29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac7a71310e665ef029bfd84a557b19d22dd2a05ffc4f9b0c55add351ed33988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7045c4ca06bdc66b34a35c5a473441a89c23eeed5e97dbc6fed5ed20786de3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924308bd680198cb5787d818c355a118902669ab9c272befdbfeb91416d726a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7950792f3fa68ac5ea0589ac1fce4b10697ff5cc35badc6155403173fb09d918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18eba6b65e1770f86ab29cef6f612ae101d4f47308c9834f2591abfa17bf0861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26e3275292e15a314ce58373d38e5ce5d0e5e4db69c9a9d6d82c0a1d2797014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30432758b1d484b88d8d61f8109e9450f98d8755a6bbaff4b3d4ddafa9bc52ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gun1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39996ab245b744a18cc86ef786e37d389e5830144e272e9af07c90f6871a0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33df09c5bcf7eece7b9b2e3dcabfb5cc51bca8556d0474858d0802360f3136fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d3a6ca4a868b02dd93fc667dfdf29195356ff861cdd7370b7a4a2dfd4a103d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/teagunup99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600f602f58637605605e0442bd30114d39bba1a421144db96ecdfee03061e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc55eb5e156cee9cfbf89d2bc3f479e45bc198b052b5286950f1b9fd40d68ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff30ecf8de84fa98fefe9617c7acc1b424e8c5328ed7551e432ba8c22e61cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bba039ba827212c63c10613bd28ee276bc305fee8c00efeca20ae84bd4e11c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e511648cecfaa67f113fbdbc834928ec9009e87dc58ef1d23a4cd0cd1b6a4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3972e8764ce7f53cba77dab94d5e127eab25ad82c7b45ee0825fb8da729f55e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e335aa68ddf6da95022f7fdebadff7a7322ce357e05f381b2c8c4a73712418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...