Malicious code in bako5 (npm)

Source: amazon-inspector 5db611ff84f632a4a2d30cc1976e1463496b9237d7dff4443ee163460ce881c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

bako5 (1.1.4), tea_gun (>=1.1.2, <=1.1.3) potentially affected by unknown CVE via tea_gun (1.1.4)

teagun NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teagun and may be impacted: - bako5 1.1.4 - teagun =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181567...

EUVD-2025-132679

Malicious code in bako5 npm...

Malicious code in bako5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db611ff84f632a4a2d30cc1976e1463496b9237d7dff4443ee163460ce881c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...