Malicious code in cold-yellow-crab (npm)

Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55379

Malicious code in cold-yellow-crab npm...