Malicious code in digital-red-silkworm (npm)

Source: amazon-inspector 12e81ba66c69220c64bf197586b92487c9db2c99880620ef31d85c196b1b0e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-54892

Malicious code in digital-red-silkworm npm...