Malicious Package

Overview icy-black-goose is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in icy-black-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52506c0ffeb3b00f0a77c12a8ae7e3553a0a580af67cc9a0e2df1580f1b7b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53892

Malicious code in icy-black-goose npm...