Malicious code in established-blue-ocelot (npm)

Source: amazon-inspector 2def0bfc319788ba1faa3d5055590464c557a21c4c4a2b66b147973ea7052f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-54569

Malicious code in established-blue-ocelot npm...