@akunsansan0/pucukharum (>=1.1.4, <=2.1.1), pucukharum (2.1.1) potentially affected by unknown CVE via pucukharum (1.1.4)

pucukharum NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on pucukharum and may be impacted: - @akunsansan0/pucukharum =1.1.4, =2.1.1 - pucukharum 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181514...

@akunsansan0/baso (1.0.0), @akunsansan0/biru (1.1.4) +284 more potentially affected by unknown CVE via tea_nextgun (>=1.1.7, <=2.1.1)

teanextgun NPM version =1.1.7, =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on teanextgun and may be impacted: - @akunsansan0/baso 1.0.0 - @akunsansan0/biru 1.1.4 - @akunsansan0/biru1 1.1.4 - @akunsansan0/biru10 1.1.4 - @akunsansan0/biru11 1.1.4...

@akunsansan0/tea_gunt99 (1.1.4) potentially affected by unknown CVE via tea_gunt99 (1.1.2)

teagunt99 NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on teagunt99 and may be impacted: - @akunsansan0/teagunt99 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181569...

Malicious code in @akunsansan0/karedok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5c94bd91327f8ea51df74b18c10ecb0240995f7856dbab481e8fb93daa35a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91216e5e002a1914b1fc895e621b3126b4e89c7d1b2b18de92381ea396af0544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

tea_gunfinal (>=1.1.2, <=1.1.5) potentially affected by unknown CVE via tea_gunfinal (1.1.6)

teagunfinal NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on teagunfinal and may be impacted: - teagunfinal =1.1.2, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181568...

bako5 (1.1.4), tea_gun (>=1.1.2, <=1.1.3) potentially affected by unknown CVE via tea_gun (1.1.4)

teagun NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teagun and may be impacted: - bako5 1.1.4 - teagun =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181567...

MAL-2025-181469 Malicious code in cewe16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70737668630f93820f229e54051acbeec29cc2c6927298206dc6739b12b06db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181536 Malicious code in roti29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4081586b459393561fe22e1639a81652ad5f9d090bbe7efb31e27ad6070d6a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181409 Malicious code in baso51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cef24997c91d4a3575890eeccda0131184fe5bc0304fe29c4457e69671e950e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea_guntry99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6e491710d16f4f04edc61ffb1d3c214ef66787e862b981f9d9dd32a55964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac56a9f36f3f95ba774129c441af79348a900781eac85d20f680cb3ad8e58b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/teagunz99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e18a5bbdb53c917f71debc48f150001f8a1c6a63a6373de4f96450e9326fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a3ee29a9cbb10eed312d786c35032608726f9789e9bbc1bc4e728482f5943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

@akunsansan0/jorelat (1.0.0), @akunsansan0/jorelat1 (1.0.0) +31 more potentially affected by unknown CVE via teagunup99 (1.1.5)

teagunup99 NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on teagunup99 and may be impacted: - @akunsansan0/jorelat 1.0.0 - @akunsansan0/jorelat1 1.0.0 - @akunsansan0/jorelat10 1.0.0 - @akunsansan0/jorelat11 1.0.0 - @akunsansan0/jorelat...

@akunsansan0/batu (1.1.7), @akunsansan0/batu1 (1.1.7) +32 more potentially affected by unknown CVE via amis_pisan99 (>=0.1.0, <=1.1.9)

amispisan99 NPM version =0.1.0, =1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on amispisan99 and may be impacted: - @akunsansan0/batu 1.1.7 - @akunsansan0/batu1 1.1.7 - @akunsansan0/batu10 1.1.7 - @akunsansan0/batu11 1.1.7 - @akunsansan0/batu12...

@akunsansan0/cewe (1.0.0), @akunsansan0/teaguntur99 (>=1.1.4, <=1.1.5) +10 more potentially affected by unknown CVE via teaguntur99 (1.1.4)

teaguntur99 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntur99 and may be impacted: - @akunsansan0/cewe 1.0.0 - @akunsansan0/teaguntur99 =1.1.4, =1.1.5 - @satria9897/air 1.0.0 - air1 1.1.0 - air10 1.1.0 - air2 1.1.0 - air3...

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

MAL-2025-181428 Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...