EUVD-2025-132735

Malicious code in @akunsansan0/pucukharum npm...

@akunsansan0/pucukharum (>=1.1.4 <=2.1.1), pucukharum (=2.1.1) potentially affected by unknown CVE via pucukharum (=1.1.4)

pucukharum NPM version =1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on pucukharum and may be impacted: - @akunsansan0/pucukharum =1.1.4, =2.1.1 - pucukharum =2.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181514...

Malicious code in @akunsansan0/pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac703b0f240fd4c913c8801170626c600aa9c5d458b907c0332eac2ac94cc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7d1b06b0c469a6a09dee64d915dc0425c87cb75418ec5192d9f1395e686b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132385

Malicious code in pucukharum npm...