Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-177595

Malicious code in nightwatch-javascript-kastra-antares npm...

EUVD-2025-113876

Malicious code in eslint-plugin-nightwatch-javascript-restart npm...