Malicious code in grubby_guan_z3n (npm)

Source: amazon-inspector 1305e0ff818d87e7ac01fddbb4ae31a0e7ccf80f76d26d290bf610b3e3f1e24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-98435

Malicious code in grubbyguanz3n npm...