EUVD-2025-132283

Malicious code in teagun npm...

bako5 (1.1.4), tea_gun (>=1.1.2, <=1.1.3) potentially affected by unknown CVE via tea_gun (1.1.4)

teagun NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teagun and may be impacted: - bako5 1.1.4 - teagun =1.1.2, =1.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181567...

Malicious code in tea_gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b91899ebb45d1823365f56b05bf076f87fe9a23a4776026468a2112650985c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...