EUVD-2025-147474

Malicious code in trevora-ysa-cir7 npm...

Malicious code in trevora-ysa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8a4ba6a5adc1123fb53a2ec933fe0eae53538d6e9c971467e659ea78999226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...