@akunsansan0/pucuk5000 (=1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (=1.1.7)

@akunsansan0/pucuk5000 NPM version =1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

@akunsansan0/pucuk10 (=1.0.0), @akunsansan0/pucuk11 (=1.0.0) +11 more potentially affected by unknown CVE via pucuk5000 (>=1.4.4 <=2.1.5)

pucuk5000 NPM version =1.4.4, =1.1.2, =1.1.0, =3.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181513...

EUVD-2025-132387

Malicious code in pucuk5000 npm...

EUVD-2025-132743

Malicious code in @akunsansan0/pucuk5000 npm...

Malicious code in pucuk5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf67abe3288052feba873b55b882342b86522cb67b04eee421f5a72f159901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...