Malicious Package

Overview leading-chocolate-roadrunner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-53573

Malicious code in leading-chocolate-roadrunner npm...

Malicious code in leading-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d572ac374f059d6e27914bfdbee76b3982214424c0e27ac7492f241bf3cceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69076 Malicious code in leading-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d572ac374f059d6e27914bfdbee76b3982214424c0e27ac7492f241bf3cceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...