EUVD-2025-123267

Malicious code in promise-ursa-testcafe-spawn npm...

Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...