Malicious code in distinctive-gray-dove (npm)

Source: amazon-inspector f3d1eb2049b7b4c3f765b9f7d25e02bc0c5f9fa3317d095400fa7833bf59e076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-54853

Malicious code in distinctive-gray-dove npm...