Malicious code in clean-apricot-sole (npm)

Source: amazon-inspector 96fb8da48420c4894453809a7c4015fb8e1b5c604ee2f29e8c17f74db89e3552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55436

Malicious code in clean-apricot-sole npm...