Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142669 Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115371

Malicious code in charon-start-miranda-zephyr npm...

MAL-2025-148140 Malicious code in spectron-webdriver-sedna-charon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de453de1c49e374ebf44715c50ac02904e4677909382b3ce27270d01c5ca8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143992 Malicious code in jsonp-charon-jasmine-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71238e390649e49d2401aaea0455dc7e0bb1a22fac50887ed8c53667113553e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140735 Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113404

Malicious code in frontend-meissa-scripts-charon npm...

MAL-2025-141134 Malicious code in cors-rest-charon-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e7e968492416ad472cd8f7b30910fbebdace6c66409b3db0c40087aae8dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149882 Malicious code in zephyr-charon-draco-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ed338c2debeeda0e1406d49dd402a5cca90b1cca0aa88d2480ec73c64a6d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112062

Malicious code in jupiter-bunyan-tool-charon npm...

MAL-2025-144349 Malicious code in levels-bootes-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6250de6f7530c83732e5500e5ff0844acc606c31046c38698aa8affb35a28ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148155 Malicious code in spica-charon-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19137bc29e8d26057720cd37eada1f3debb2ca67b9358bcc23f58791b8160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144535 Malicious code in loop-solis-charon-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146676 Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139475 Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...