EUVD-2025-72731

Malicious code in @kellyman17/kellymanteasproject npm...

EUVD-2025-72289

Malicious code in kellymanteasproject npm...

@aesx/aesx (=1.1.6), @bocahajg75/bocahajg75 (=1.1.5) +537 more potentially affected by unknown CVE via kellymanteasproject (=1.1.9)

kellymanteasproject NPM version =1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on kellymanteasproject and may be impacted: - @aesx/aesx =1.1.6 - @bocahajg75/bocahajg75 =1.1.5 - @bocahpripayer5/bocahpripayer5 =1.1.5 - @boelboell75/boelboell75 =1.1....

Malicious code in kellymanteasproject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb8c16f8233b39246253d967f796cd2a91e8373a386451157dc8d97900aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...