EUVD-2025-147477

Malicious code in trevora-pisa-cir7 npm...

Malicious code in trevora-pisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b32a80dd3859367bc4874c07b1f081de4cb2c173ba9817f2db97626016815bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...