MAL-2025-184902 Malicious code in sonic-jos-afifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3c5c5bd79e5cb2435bd4af6d24c1966c7382240e02304a699d1d3226b32dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185212 Malicious code in sonic-os-fusadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0ad8dc050cbe44a4563bc0c62043790e416668391ccbcdbe72167e911fc786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184983 Malicious code in sonic-kig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2eaf0f6609ed560bf6c40450fec79a7e8018c6d52adb13d21677daf91e5063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185217 Malicious code in sonic-os-fusog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d6aa337dd2e4044a2de8d74183f09effc98e1e611a0e77d4665a5b3820d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185140 Malicious code in sonic-kulig-tgviave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f465988c7741c5cdeb8cc7808b2ba7d42b3869c8b1a1c1ab0cfe0a034fc7cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7ec154070d1c79c46a223e89ae53d402f1785884e7db30c605d9d799ccc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2eb2804d4a5873bc9e8ee0777f62307adfd6418c91bf60e73b36f1aebb1e8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuoig-timesexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1defef4ff8e5a745d48d7ece087d36ad1f21dbe727e8b3dfc8b264c2af40e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed220a544bef48d81e84a2c43aa28c1cbf9f64bc496e4684bb1250f3c997f7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1831213d882f01633e8f611927f84a603da9e5a0981be08d66f230a828250a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgaigiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a43885dfcedeb12fa4a63d6dbc5d33cfd24731a5a56462570131a12cf2d0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifffacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9fc3407503798f900605e3de44e4bc1a55cf9145a0baba5de7ab2bc511622b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c652a077a710e6c4246db983415fcb1375af3f6353a1a9ee5f20fa7bb34c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tmoeroca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d264068b09c442c3da026dc8f62816adf39d765dde846103ec49b628679bef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10215a95bbf1beb3cdcbdd2ceef8497e1e0d68d2c4808a7e4a922892aab787c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185221 Malicious code in sonic-ots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10521ebbc7546da459671f9ffd1c8a10b821eb20ff49cdd51e8ed5d36ea5ba88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185135 Malicious code in sonic-kulig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca74ed0f4f77b67b1246ce51373fc8a7193c051ca0d8bf024f9dc3d85f8f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-ti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e384554cc99e5a3fcb7d433ba59ed6c5b8ad21763139a2669a40fc117dd6541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoapav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b63130f930adc05d71769743fcb68036e6a8352f713cf7f9f55e221284d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...