MAL-2025-169204 Malicious code in trevora-cir148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3a95f960da234f9a36c7fb1ec7344858bc6ceae82ab5e9700f7ce64c68dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147571

Malicious code in trevora-cir46 npm...

EUVD-2025-147630

Malicious code in trevora-cir128 npm...

EUVD-2025-147652

Malicious code in trevora-cir108 npm...

EUVD-2025-147613

Malicious code in trevora-cir143 npm...

EUVD-2025-147641

Malicious code in trevora-cir118 npm...

EUVD-2025-147574

Malicious code in trevora-cir43 npm...

EUVD-2025-147667

Malicious code in trevora-aaissa-cir7 npm...

EUVD-2025-147496

Malicious code in trevora-jjisa-cir7 npm...

Malicious code in trevora-jisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d762a6c6b0e3388b741f848ca995090196869255384f28279c59acb8afcf4d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147500

Malicious code in trevora-hiysa-cir7 npm...

Malicious code in trevora-nisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29881b94f54686ff1691b73d0bdf2473894d277de6b68c0b6e99356c243d36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147562

Malicious code in trevora-cir54 npm...

EUVD-2025-147528

Malicious code in trevora-cir85 npm...

EUVD-2025-147575

Malicious code in trevora-cir42 npm...

Malicious code in trevora-cir93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da579609b4128f8a5ee64e657db5ca632d9cef02c0150ac17ae7326b248b93d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147547

Malicious code in trevora-cir68 npm...

EUVD-2025-147587

Malicious code in trevora-cir31 npm...

EUVD-2025-147520

Malicious code in trevora-cir92 npm...

Malicious code in trevora-cir80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa31f93232fc346aa273606897d801c93f4a87a61e975578da2db81bb443282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...