Malicious code in less-loader-cross-env-nebula-ceres (npm)

Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-111796

Malicious code in less-loader-cross-env-nebula-ceres npm...