EUVD-2025-120881

Malicious code in ursa-changelog-prompts-public npm...

Malicious code in ursa-changelog-prompts-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7e4316ad2e5cd206f165f7146db81b01de8cdf3a67430488a7af608beb130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...