EUVD-2025-147503

Malicious code in trevora-hhisa-cir7 npm...

MAL-2025-169309 Malicious code in trevora-hhisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444d2f9ed7cbb8dc4d7cf96ecfdc25e2b1d785d8db1c736baf2e89af68f48d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...