MAL-2025-169271 Malicious code in trevora-cir73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e9ddb31e2bb9df058051d963b1e10959139180a3dc6720319c72e05861b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169248 Malicious code in trevora-cir52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f4e35430dce4416810f2d9d601fabe8b74f956a85ff5cad27b5b92b784760f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169242 Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169237 Malicious code in trevora-cir42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebc5c6c0efccffbfbbc23b653e48b5eeb6776a455c762cdd4b6709c5342c7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169194 Malicious code in trevora-cir139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfe12570fa245e8f6ccbbaeb26641136658df1f6910deb465bc1398ce2f07f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169292 Malicious code in trevora-cir92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d53c67b24465e534bb5c7bf4e53eb892bb8552c37d8ac4d8a4fac866de6a5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169178 Malicious code in trevora-cir124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5aa672185a600b8b8d6d2da03cc1019dfded8697e29ba2fd0add5fd1740ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169153 Malicious code in trevora-cir101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facd63048cf62b4103cefb49bcd2624ab0763a309d30302b2181b6e2c99b8a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169258 Malicious code in trevora-cir61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7d62417266edc5eb453df8d43572fd3ce38328794b58d068e607323db45d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169310 Malicious code in trevora-hisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd420af3d6f8d07965fba69fd00fac5ea8faaabc906a2e914bb9fb1cdcbce0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169211 Malicious code in trevora-cir19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae53637a12040e00be0960e1a1bd7417ea94d49c9a5d30309e2b422d0403a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169315 Malicious code in trevora-jjiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61e509e4dd496b1059bd5e77294633fde76c7f0d2b94905acf4deb0a81b63a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f0d2cb75b0d14a590f5989243a7a322278f340ec46fe156e96d91ad36297c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir142 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b1b0373949d6fd40c28ef6486ad497e45d101cb34a12733bf5e182ffbb5539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee2e975ac5c0f54aa9ae2ad80291e73fe49365dd21aa5ed345bb8d4ca002d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147486

Malicious code in trevora-lliissaa-cir7 npm...

Malicious code in trevora-cir126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce8ce05237ed88c8fd66647dfc0a711a3e7f47ffb0a0a78313cf304ef3bd192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105545433adb02dcd0eaf3757ed7c4c20b1daf60ee22cc803808a3aeb3f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56283d52045dc1e4342a53479a5c6c6f8f6cfe77b90ce05aa3286921076b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...