EUVD-2025-53906

Malicious code in hushed-coffee-bobolink npm...

MAL-2025-68743 Malicious code in hushed-coffee-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f4742e713f37154602c5a6c01699e8c3933745bd265ab13101623db6d30c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...