4 matches found
@akunsansan0/tea_guntry99 (=1.1.5), tea_guntry99 (>=1.1.2 <=1.1.6) potentially affected by unknown CVE via tea_guntry99 (=1.1.7)
teaguntry99 NPM version =1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntry99 and may be impacted: - @akunsansan0/teaguntry99 =1.1.5 - teaguntry99 =1.1.2, =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181570...
MAL-2025-181570 Malicious code in tea_guntry99 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6e491710d16f4f04edc61ffb1d3c214ef66787e862b981f9d9dd32a55964c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
