EUVD-2025-112894

Malicious code in heka-scorpius-module-registry npm...

Malicious code in heka-scorpius-module-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cfe8bdca0d340d1f0b472bc30366a76ea92e2065b9d2174337175dadb2f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...