MAL-2025-111644 Malicious code in additional_guanaco_coffee-100 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2b7566d2ca9ab3fbb3ecdb94510d243e97c9b0cd383588b67b3d0afa5aebf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...