MAL-2025-184973 Malicious code in sonic-kg-tifffacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9fc3407503798f900605e3de44e4bc1a55cf9145a0baba5de7ab2bc511622b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184897 Malicious code in sonic-jos-afafiofijahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda72c45357338a332b2b1dab92b86700a8d9bb763bb67639f41c723da22872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184951 Malicious code in sonic-kas-fagiufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8010dc26ed34565dc89ea8cea1ae161e32b809f95c5bcfefa761b2ef4ec5412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184895 Malicious code in sonic-jos-afafiofia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf497e1a316f7442ed87e243c05e4d1ea3b9bb513815a05aefe937bf26478ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185203 Malicious code in sonic-os-afisigafiaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e316ff13e7ce911018f797ff6e1a7458d8a82068d1718a452ecb65c20dd58407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-ih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb9b4ee4a7047d3a50578fb0c813dc3e8af4487315de154804df6189c1488d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00e777f17a13148285f52dada784c5ea4baa150304cf219ef54142d511c9683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tifuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b982166687ee0e5f958542f7adf33a2df035c2ada89095e87fad89159827a663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87a26921ec3a2ab556ee7ddfe66b5b407c1b8f7aeed8eecbfc79c54a4adeebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52dab8981a3f6f493c8c7fb832a1520fa887b6450486664f13d5f3477dc6248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-moifc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3dac68759470f86cfd7e18db67655ee0c654417bebe0d05db753ca982fe67a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-fagiuffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fcd509908152c6aa364118f359e5c46070a2383e4cefe02fcd6436bc3ed2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b1c040ebb9a953443d98531a63825e597bb324cedfed6b5b7b9e6d6d8d9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faef3b152e4bb6e15502fa2da4c8c0368ef90810aa355abfb1c5b5d8260098f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uybajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68180cde0d187cbd5ef0ab64b4f85a173835a916729eb23d3b4dbc58366bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3526d8756b30184a19ff6014ac0972fcba170d20b7268869505b7e1ffa4372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a16c8559a87adb9e8832290de8a284ce1a237c02930748c175c720b9c93dd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-ahagafujiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845b292470eafc13b0b4b09fc30b37e4bdd96c5beb6974b69ff9f02a14dfec58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgviav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4539e975707d64f4a260374e0c3d206fc574a26e7e61e6d819187662c8d337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...