EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...