12boowjljk-notthedevs (1.6.9), ahahscroot (1.0.1) +14 more potentially affected by unknown CVE via 666-tea (1.1.4)

666-tea NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs 1.6.9 - ahahscroot 1.0.1 - bacoritul 1.0.1 - basuki 1.0.0 - df6fqftol9-notthedevs 1.6.9 - forilcuy 1.0.1 - gasmbut 1.0.1 -...

Malicious code in 666-tea (npm)

Source: amazon-inspector 1500fffff6fbb43ca26b8d28983ba8c2c85522afa7031bd5982ecf216b69c024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-72732

Malicious code in 666-tea npm...

12boowjljk-notthedevs (1.6.9), ahahscroot (1.0.1) +14 more potentially affected by unknown CVE via 666-tea (1.1.4)

666-tea NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on 666-tea and may be impacted: - 12boowjljk-notthedevs 1.6.9 - ahahscroot 1.0.1 - bacoritul 1.0.1 - basuki 1.0.0 - df6fqftol9-notthedevs 1.6.9 - forilcuy 1.0.1 - gasmbut 1.0.1 -...