Malicious code in delicate-tomato-carp (npm)

Source: amazon-inspector 9119284822c5f86cf0e433dd32ce5fe0161095888eb23d8bf670cd4b6de44834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-54950

Malicious code in delicate-tomato-carp npm...