Malicious code in dear_bug_z3n (npm)

Source: amazon-inspector aea73a2f4d5a8e9fab7913f243680d32dfb237dbc546b658de1f66b321bf39da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-105953

Malicious code in dearbugz3n npm...