trevora-cissa-cir7 (1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (1.1.4)

@mipta1/tehtehteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...

EUVD-2025-147511

Malicious code in trevora-cissa-cir7 npm...