MAL-2025-184997 Malicious code in sonic-kig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa32160447e2282be30ca23775904cbddc40bd171dadae53db61d60b41dbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fgahigyafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2549378d5629d502bfa27a7fa175e71b6565c54e5cebb8dcbbaa22705ac89378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuoig-timeseywaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb52b6e652032cbbb6349e6cf449845e2422333be93a04188036f9936034b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnadeaxwqcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bd1ed7af07dcd73758d8f3fe508f22d2411147cbfb960ba5e33d0cd07e3d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoapav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b63130f930adc05d71769743fcb68036e6a8352f713cf7f9f55e221284d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84046b45511f0d3d3887c0d9ab95a755863448488cc49cc9d6ca8356465dc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f174f222a42f8b37195fddb3ac983ab6e184fa0e30d1e2b8aa62a6708c19549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf74211cd544e2a039a5c5ed42be2ad10226c5357d47d6e8093347d686e1624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-movedaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970fdaafc20d88b95118c24a7c01f8612577d6d6bc371a7e4005ba35b1609abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509f94919490b3f60c76c3079c3d67392d10f1909c41f4333b00ace6ef44dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kg-tifuaffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10049deb09c8a75481b7c35b20b7726e1395b8362ad432c2ab87150114cee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadojxaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c043f503efef1b8deca67f95429133269fa09ad85cdcacc32e9036f64afd294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ca3f5e850d8bd5c3531b1c5d280ea40fff6a18819abc720d1774fe97c00075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef13e89f65ac30f6cc8b9b50e4f0e3cb2194e4243ba5224d1b7fcff01646757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacedcav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b5ecb542a413c9b8b727f4bca98f634eb0b792f47d6522997f486487b947e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...