trevora-cissa-cir7 (1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (1.1.4)

@mipta1/tehtehteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...

EUVD-2025-147478

Malicious code in trevora-nisaa-cir7 npm...

EUVD-2025-147486

Malicious code in trevora-lliissaa-cir7 npm...

EUVD-2025-147502

Malicious code in trevora-hisa-cir7 npm...

EUVD-2025-147483

Malicious code in trevora-mmiisa-cir7 npm...

EUVD-2025-147487

Malicious code in trevora-lliissa-cir7 npm...

EUVD-2025-147489

Malicious code in trevora-lliisa-cir7 npm...

Malicious code in pajero-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa45d8753762d252664874bd85b69ac554f591cde8263229570cb52023ef1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-mmiisaa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47eaa12be8373e4ac78550a02b80bc9ccfcb6b1ab556f700b41c80fa659ecfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147476

Malicious code in trevora-ppisa-cir7 npm...

EUVD-2025-147482

Malicious code in trevora-mmiisaa-cir7 npm...

EUVD-2025-147481

Malicious code in trevora-mmisa-cir7 npm...

Malicious code in trevora-bisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2054bc215275360ad9c923470bdd8418bef02b7e8eb5c63147015c1f0c230d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147492

Malicious code in trevora-kkisa-cir7 npm...

EUVD-2025-147488

Malicious code in trevora-lliisaa-cir7 npm...

EUVD-2025-147474

Malicious code in trevora-ysa-cir7 npm...

Malicious code in ronaldowati-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a210e6d91bbed7c4a2d80792290343d15d633f6b41f408a5b71a0a117893bf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c786bf399fde2a23d53fa81342e322dabb5aca9410e7b2cbff43719cd7ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-eeissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2cd640fe5c2f3fcf1ff93c577d3464a44d2f0487f8c188d08b31964d566424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...