Malicious code in dead-beige-heron (npm)

Source: amazon-inspector c82f1bc8f94c4af627e49453ce228f8a52a22768038b9f66ef8865b0a3276be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-117455

Malicious code in dead-beige-heron npm...