MAL-2025-169167 Malicious code in trevora-cir114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2073bb42f22e151b9dc977051068682229b6406d57b7a7b0244ea7eb20d19710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169183 Malicious code in trevora-cir129 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35aa6eff79417a45e54f1fcdd0129121deb0fa13a68dcd7499bfda2f020496bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169326 Malicious code in trevora-lliissaa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6176e92471b4583e7f72cbf96c195f914730f61a2370b6aed884bce649fcf0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169273 Malicious code in trevora-cir75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591053dc3dcacf06885efa875b5c7b5249cdb8bc9c021eba96381d74a9c10722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169278 Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169254 Malicious code in trevora-cir58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee2e975ac5c0f54aa9ae2ad80291e73fe49365dd21aa5ed345bb8d4ca002d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169327 Malicious code in trevora-llisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5a5e95288f3237781981f00b81c183066ec970c55068f22a5d3672cde0c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169256 Malicious code in trevora-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e4c469aba6455014f83d49d89d8a2cf185a54b4153d20ad1dac60952d25e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169181 Malicious code in trevora-cir127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1651d023a4ca595b5e1e89f828fcd6645ad568ccc2416a94cf61b5ba9c84326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169313 Malicious code in trevora-iiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc2c6bfcab95b5e9cc3735c978a38f4eaccd8e2bfe80f0cc00803b4e3a34384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54342caa664b317b83938880c5e919b43dad7f7547347817c225c710825fb686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147512

Malicious code in trevora-cisa-cir7 npm...

EUVD-2025-147507

Malicious code in trevora-ffissa-cir7 npm...

MAL-2025-169225 Malicious code in trevora-cir31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23fae7805ddd0b1cbf090454de4ad782e84e40234541d6930d8c2c30a9c1e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169204 Malicious code in trevora-cir148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3a95f960da234f9a36c7fb1ec7344858bc6ceae82ab5e9700f7ce64c68dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169195 Malicious code in trevora-cir14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37684e7db8782d91e850288af1ee63ad02f30fac833d88d5527392ee34799c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169267 Malicious code in trevora-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a23834d7df233ee2c0fac5c25a12f296f51e45a5540d92207b65d4e6c92b0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169196 Malicious code in trevora-cir140 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460948dc295ea20105adf8a637afffe27b48d6cb83d3ce31f32e4d07853b6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4af3a90f578ef47ba680f7f96e2fe2b1f1c4366a10d26e51602dfdcab76af2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...