MAL-2025-148156 Malicious code in spica-cli-heka-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cli-heka-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...