Malicious Package

Overview @akunsansan0/pucuk5000 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: SNYK:JS-AKUNSANSAN0PUCUK5000-18319552...

EUVD-2025-132743

Malicious code in @akunsansan0/pucuk5000 npm...

EUVD-2025-132387

Malicious code in pucuk5000 npm...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

@akunsansan0/pucuk10 (1.0.0), @akunsansan0/pucuk11 (1.0.0) +11 more potentially affected by unknown CVE via pucuk5000 (>=1.4.4, <=2.1.5)

pucuk5000 NPM version =1.4.4, =1.1.2, =1.1.0, =3.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181513...

Malicious code in pucuk5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf67abe3288052feba873b55b882342b86522cb67b04eee421f5a72f159901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...