@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...

Malicious code in kellymanteasproject (npm)

Source: amazon-inspector dfb8c16f8233b39246253d967f796cd2a91e8373a386451157dc8d97900aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-72731

Malicious code in @kellyman17/kellymanteasproject npm...

EUVD-2025-72289

Malicious code in kellymanteasproject npm...

Malicious code in kellymanteasproject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb8c16f8233b39246253d967f796cd2a91e8373a386451157dc8d97900aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@aesx/aesx (1.1.6), @bocahajg75/bocahajg75 (1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (1.1.9)

kellymanteasproject NPM version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx 1.1.6 - @bocahajg75/bocahajg75 1.1.5 - @bocahpripayer5/bocahpripayer5 1.1.5 - @boelboell75/boelboell75 1.1.5 -...