Malicious code in @mipta1/kofxxad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7354c24ae12306674b384cf07f0718d1536e9360ddf3dfb0625a7f3b3707061e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138728 Malicious code in fond-copper-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679bc3f0be0d096c7197b95397a01d24f75767f4a40dd4f33a5d2d564a929856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69711 Malicious code in old-peach-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16c8f991cc7046285f814cbd05cb7c9276a9d3db91a0b68e5ba26b3f842e267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...