bako5 (=1.1.4), tea_gun (>=1.1.2 <=1.1.3) potentially affected by unknown CVE via tea_gun (=1.1.4)

teagun NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teagun and may be impacted: - bako5 =1.1.4 - teagun =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181567...

Malicious code in bako5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db611ff84f632a4a2d30cc1976e1463496b9237d7dff4443ee163460ce881c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132679

Malicious code in bako5 npm...