Malicious code in convict-pavo-kaus-redis (npm)

Source: amazon-inspector 87dedd338de94ab3aca08a7d7afb89baa6958507406e3a7ae194da178bea1971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-177292

Malicious code in pavo-paleoecology-pavo-kaus npm...

EUVD-2025-115028

Malicious code in convict-pavo-kaus-redis npm...