EUVD-2025-79787

Malicious code in arts-dao npm...

absolute_woodpecker_dumbs (=1.2.1), academic_eel_dumbs (=3.3.1) +2428 more potentially affected by unknown CVE via arts-dao (=1.1.5)

arts-dao NPM version =1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on arts-dao and may be impacted: - absolutewoodpeckerdumbs =1.2.1 - academiceeldumbs =3.3.1 - academicmolluskdumbs =1.4.1 - acceptablefishdumbs =2.4.4 - acceptablemoledumbs =1.3.3...

Malicious code in arts-dao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6dc0a6f4a2673aff819afc3034818eccb2669fad02cac2ebc2ab84ccc3431e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...