Malicious code in creative-gray-mackerel (npm)

Source: amazon-inspector 620fb07857b5ed1ea2c13e6fd19e6987fbea3d8f1f8b3732d4f1e9aef0b76f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-55117

Malicious code in creative-gray-mackerel npm...