MAL-2025-169292 Malicious code in trevora-cir92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d53c67b24465e534bb5c7bf4e53eb892bb8552c37d8ac4d8a4fac866de6a5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...