MAL-2025-185211 Malicious code in sonic-os-fsg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2eb2804d4a5873bc9e8ee0777f62307adfd6418c91bf60e73b36f1aebb1e8a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185217 Malicious code in sonic-os-fusog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d6aa337dd2e4044a2de8d74183f09effc98e1e611a0e77d4665a5b3820d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185097 Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184981 Malicious code in sonic-kg-tiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ce21a636d28dc9f8a235cbfbd0ba04bd1cccb52e323cacb176d65dff667410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184983 Malicious code in sonic-kig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2eaf0f6609ed560bf6c40450fec79a7e8018c6d52adb13d21677daf91e5063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970ce17e3ee4074fdeb15e394625ae5c9208cf2c5ce9f3c867102b4707623093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afsigoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1831213d882f01633e8f611927f84a603da9e5a0981be08d66f230a828250a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-fusiaffadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed220a544bef48d81e84a2c43aa28c1cbf9f64bc496e4684bb1250f3c997f7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-moved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c652a077a710e6c4246db983415fcb1375af3f6353a1a9ee5f20fa7bb34c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10215a95bbf1beb3cdcbdd2ceef8497e1e0d68d2c4808a7e4a922892aab787c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoapav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b63130f930adc05d71769743fcb68036e6a8352f713cf7f9f55e221284d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kas-faga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839911df5eee7c783c483105bb63bae889a776bb393bcf77c80e808af55216cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f47928018fa75183df95ce01bbc975bd76116f6c00eae15241847b03ea6d87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2eaf0f6609ed560bf6c40450fec79a7e8018c6d52adb13d21677daf91e5063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fa32160447e2282be30ca23775904cbddc40bd171dadae53db61d60b41dbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigafc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aced286bc188ec0bfc18d8e9c3df582b3f3516a95e295e015905e813d01dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kaos-fagfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d96e7e46cf201f2af3ad308147dcc651e487f073b98e130848317e0732d395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afafiofijhah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b47425c7dcc19427e3073498537b5889472e58f70a5d41c8896f2ed7759c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-afigafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e42b3f408a4059927972a6ccbdb450ea41f696340759b2c8601b0d83466560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...