Malicious code in comet-fomalhaut-dotenv-safe-polaris (npm)

Source: amazon-inspector 17f68828d1211166a7827a25bbd5da1c86e3d89362eb6275cf0f5ca8e89781b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-122842

Malicious code in readable-eslint-config-fomalhaut-dotenv npm...