MAL-2025-185187 Malicious code in sonic-oihg-mofc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2f6b6ab5d0be59d95cd69343ebbab79b504757f15c8b1b58b67460ed3df6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184919 Malicious code in sonic-kaos-fagiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bb091af7cff1e8d6f544ec9794c1a8a11fca9edc0b5d29348663501eaaa2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185208 Malicious code in sonic-os-afsigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167ba2603e47d42800c574076f405bc601a59b7377615b051a0c3f4169af99fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184997 Malicious code in sonic-kig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa32160447e2282be30ca23775904cbddc40bd171dadae53db61d60b41dbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185200 Malicious code in sonic-os-afisigaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5f828fb8cdb811ae8ed2b9e4dc1bf718b7b70d3bf5a29df399152c0f4b8db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uybajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68180cde0d187cbd5ef0ab64b4f85a173835a916729eb23d3b4dbc58366bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviavuex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e358eac99a0b7903c1f4d0d312761fc993275b4045acd28b8cda8c8cac5f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2037bf464454f993c28b7464e5ff98cf9d6a142f8377c888fa46990c9032ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918062cb52b10b2c85c3ecb368e8ab79a6279c94b248c425b99dde582769b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2be54eab7252a37628584d84d903c5cea37ba4a30bfb84ed1f30beaa82a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120dcc41dafaf7ce6084ce003f1117a20fdd8c36bf6893787b6dbd6c59d7ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiuffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fcd509908152c6aa364118f359e5c46070a2383e4cefe02fcd6436bc3ed2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3c5c5bd79e5cb2435bd4af6d24c1966c7382240e02304a699d1d3226b32dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moigfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18972744735759ad2a20c40d97f6d9d7780eef875ed7cb15093c676258672275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a16c8559a87adb9e8832290de8a284ce1a237c02930748c175c720b9c93dd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgvcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b26d97015ba048546be0e9b34c8fd7d24f5fcf73c6c269ad507f13d5b52f638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kag-tgivcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9af6dc54f395ebaf0243fb570ca5085ba33aa4b6c04f0af5a1d09ecc59c986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa907b684ea26839e25114a7646a7ba78cf7acb997aff5706371991ac3b359c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...