Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117506

Malicious code in bored-plum-lark npm...