MAL-2025-185222 Malicious code in sonic-ots-uyaioag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4141b1827e9bb5b8c200eb3722a6dabfef8c8758aa7fd53bc23b6104b3a6ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafiufuufufaub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26960c10aa344ad6d0fe41bde87ce7f34a4fca28559ebb01badda9d6da7c8623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dinuhkosuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4681022783bc3962752a4e089b2c879e733b1977a0e1bbc083ee49de35e8768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-kubusisasiduzika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230755db21b5d6b34e9d4cf815a2545b37508cc71117b9de61bd3e549e7f4278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46dc343fea8389cf32e3d6ae79d04aa6b8a29ddb8fc30df91212854ae0ef69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuacfivaacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5c4d31880314a32316fe644bddd2e6e2b4b5bc291168b5c03a29f35db1c410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ughi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3016f938426d39f973185c470108bb850a3e816a7b67dde3fb905ce1158107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-on-lakinuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb08ce36e6290159fe8dbc300634fe139632ec7ecfc0ab362ee7f3d77dcb652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010d052d1f964d1b945de8e4ee57352789d706cacda8215ec1c27430060a0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad769568944dbd35838d3ed83b77ccfb610d2d6b6aedac73385b68c22b79e92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokulia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cb22d315a501d03b10e8adbaebb56ad3c4455a69a9e6796866a8af99e11574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufajab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e915719a8df4400def253efcfc08f058bfd1ac9093b10cf7f589e389001068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavghafg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac73476b4a2daddfd5e23b23993906a6a7217112f6a5fa28ee48556f1806fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitali-dan-ujokuluaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd418f93d91ee5bd14ee4e9a922937c05928bf21ffe4d2a9530bf34d76d1178e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afisigafifafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd30e3d1a06aa74f01aeac7b0ec398f01080410616ee45ef898e8a8756774fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgasfsdsdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1163719547c80c3054d0f6fbc1751112b56e43539c4f81f77b6cab3b16bc9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldikis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdcc3aa397b763ffe7b5608824546163ab036cfa64d4bb688b53777f8bc2522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de859f81187065c04344fe83c46e876755626adac45899338b81ab4c19d59404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhifadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52874187a3034112c917bd32bbc6e6cb0abb23ff50b1b3e9ae88066220b3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-olol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d628e2c86e45a67038b100ccbb7cfba9c867d685c1ee99c88dc4b841747fe1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...