Malicious code in opposite-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d8e3b86d9f72edab82c0e3082b44d471dc00893e74adc3b51ebc064442f512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52919

Malicious code in opposite-tomato-rook npm...