MAL-2025-170998 Malicious code in candy-yul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c2ed33ebdeac7cb539317af14bb3bcc327b1ae3d45cd5d445f8e8b126063e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145814

Malicious code in candy-yul npm...