MAL-2025-147706 Malicious code in scorpius-config-ursa-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e7012092e984a4619a97dd81ff1b126c11fa6fd7e39077c8cd467fbf5b3e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...