Malicious Package

Overview @akunsansan0/pucukharum is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

EUVD-2025-132735

Malicious code in @akunsansan0/pucukharum npm...

EUVD-2025-132385

Malicious code in pucukharum npm...

Malicious code in pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7d1b06b0c469a6a09dee64d915dc0425c87cb75418ec5192d9f1395e686b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/pucukharum (>=1.1.4, <=2.1.1), pucukharum (2.1.1) potentially affected by unknown CVE via pucukharum (1.1.4)

pucukharum NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on pucukharum and may be impacted: - @akunsansan0/pucukharum =1.1.4, =2.1.1 - pucukharum 2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181514...

Malicious code in @akunsansan0/pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac703b0f240fd4c913c8801170626c600aa9c5d458b907c0332eac2ac94cc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...