EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

Malicious code in callback-apollo-forever-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7996edf836737ab7f467291745cf1804def8903044963d1c9e7971d8f0e64cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...