EUVD-2025-120481

Malicious code in weywot-xanadu-yaml-install npm...

MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...