EUVD-2025-124617

Malicious code in nconf-apollo-ursa-callback npm...

MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...