MAL-2025-147833 Malicious code in semantic-release-pavo-winston-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79981c099c9d1ef7e0a447288b3f3a95d5de7a9bf8ba48b90112ecf212dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122090

Malicious code in semantic-release-pavo-winston-xo npm...