Malicious code in conventional-yellow-octopus (npm)

Source: amazon-inspector ed80c92353a50938d0de7980a6a259bae464fea0ac6ef70f6d887fb1435854b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55175

Malicious code in conventional-yellow-octopus npm...