Malicious code in left-coffee-dolphin (npm)

Source: amazon-inspector 74bb2862b252ffe6090295cb556c6580e056bb5fd122872ac8f502b8b47671a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-53564

Malicious code in left-coffee-dolphin npm...