MAL-2025-185058 Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010d052d1f964d1b945de8e4ee57352789d706cacda8215ec1c27430060a0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiufaugafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0f0a9ed086873fc435188d942239033453e5eb56450ac1f281f89b17170d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45061620d0ce187e2053e10d17ac0acdf1cf31d36ac43b5f9a8442ddb47022dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbea887ffa500e33cf0f11a4bffad3485306217c6eaf49d2c9de357ce74c2690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitok-doni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108fe741ad7c7087330710c10bb807812cdf241ddfd5847226061ff233662a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-daiugadajdfij (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1143227fa74c49258c9f6e6cd14407ad2176492233bfac808761cb6b336cfafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f0eb0a39024c8fc860d6f8cc15bbc3583073ee231eb3215305805b04d7f8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfd3c964e1788fbabeddf31cdfcae54097b7392ceb36af96ce87646c8adcefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfbdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6690bba44da3d9deebdbfe396938de605d2f6c00d1f0317f0c002ef59c2d7134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avamobn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b1e429f77a11ea5a32b1060225f6a62b3daeda9776fb2b8cda453c55ab499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bca23b42de05678abd0a724ac772f55b6c9c62ab44b81ca63c831b36f3f4483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fgiafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272ddaf144809d894182063c1348b143529b10c241b2ad070cf5805fc689fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-ung-fugugaiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153178d79d8f294d315282748c95ad29cc79fe1d1cc4bb2edf4492306d28cee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11c422018bccffbdd88bb97c70ca755b27c646ecff900c1c8112ecd38b80a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sone-kat-fidulgafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ed920d76d51f12c4a0b545604f84380f8d1e40872b460f671f4ae1f93a6ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kujab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69c9275bccf23da81d79e613d69d5b9e43f7879a5daf931c3a7fc79c61b1e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafiofiahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923e8584a2cc29cd5bd381130b002a80151be95eb5901297da20acf91f66f974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5e6182848eac541f35b5b51fb86c941b024428aba1ca8006590f0f06c6670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvaban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d8879fe182422d79c2aad3584322050860a6d54aa304690bf54dd8d705e09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...