EUVD-2025-115057

Malicious code in configstore-fusion-mensa-winston npm...

Malicious code in configstore-fusion-mensa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480df2dc25d9a8f8ba0219587f72f5d1ac90ff210e0c0459f96e3fbbebb3052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...