Malicious code in fixed-yellow-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f1cea351cef312e3ef7c1be05bf8c3d3f563cba205801620ad00122ade324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54297

Malicious code in fixed-yellow-blackbird npm...