Malicious code in chronic-plum-turtle (npm)

Source: amazon-inspector cfff1e7c07a94cc367318e38952d8c58a35c3ff7b78e18f97fbb1bb953368c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55464

Malicious code in chronic-plum-turtle npm...