EUVD-2025-111981

Malicious code in kastra-scorpius-mocha-fetch npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

MAL-2025-144132 Malicious code in kastra-scorpius-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7d64236b575351a9446cd6e18afbbbce19a2a32b2eb67ae0e1e1799e035f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...