Malicious code in compact-green-silkworm (npm)

Source: amazon-inspector 37c715dcbad1e86b4bbd8fb7263722919b92e8fea2085f1565b84b2789190e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55309

Malicious code in compact-green-silkworm npm...