Malicious code in icy_firefly_z3n (npm)

Source: amazon-inspector 08b7264c02a6e1a1d5b44cb703f62b551d2e51af774e84e6ed93f9144c5419cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview icyfireflyz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-79076

Malicious code in icyfireflyz3n npm...