EUVD-2025-115373

Malicious code in charon-semantic-release-vuepress-centaurus npm...

Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120790

Malicious code in version-loopback-ursa-charon npm...

EUVD-2025-112305

Malicious code in janus-europa-luna-charon npm...

EUVD-2025-123538

Malicious code in postcss-charon-antares-mutation npm...

EUVD-2025-115368

Malicious code in charon-wasat-octans-zenith npm...

EUVD-2025-115380

Malicious code in charon-mongodb-webdriver-manager-comet npm...

Malicious code in ophiuchus-publish-charon-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859855906fa5998d0602074884a3f159e91c73027f4acfd3770d9a1b8e1f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113622

Malicious code in firebase-charon-node-config-delphinus npm...

EUVD-2025-114146

Malicious code in element-ui-charon-juno-hermes npm...

EUVD-2025-123051

Malicious code in pyxis-charon-neptune-install npm...

Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121589

Malicious code in style-loader-node-config-charon-izar npm...

EUVD-2025-116489

Malicious code in astro-phenomic-yakutsk-charon npm...

EUVD-2025-115319

Malicious code in cli-charon-hyperion-flare npm...

EUVD-2025-113113

Malicious code in graphql-charon-element-ui-iota npm...

EUVD-2025-115388

Malicious code in charon-configstore-polaris-dependencies npm...

MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146042 Malicious code in pegasus-mongoose-nconf-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e42d453d5a01ab48f01d5932b81edadec48a2ab4c446084e2e31ab978744e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...