Malicious code in horrible_boa_dumbs (npm)

Source: amazon-inspector ac052dcb3b53d12a8981599d37790a7a1ef3e67e2139e9fb097a15b4f0b43f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-81670

Malicious code in horribleboadumbs npm...