EUVD-2025-115388

Malicious code in charon-configstore-polaris-dependencies npm...

EUVD-2025-122440

Malicious code in rocket-sync-jovian-charon npm...

EUVD-2025-115385

Malicious code in charon-inquirer-bellatrix-global npm...

EUVD-2025-114146

Malicious code in element-ui-charon-juno-hermes npm...

EUVD-2025-115365

Malicious code in charon-yildun-io-chariklo npm...

Malicious code in test-gulp-charon-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0b29895741df36eac04a6503a42748cbc25a8cb6c273d2444900b7c35c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111808

Malicious code in less-arcturus-charon-markdown-pdf npm...

EUVD-2025-115389

Malicious code in charon-commitlint-config-angular-mdx-umbriel npm...

MAL-2025-140735 Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143993 Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140729 Malicious code in charon-pegasus-jsonp-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82efbf0050b8e5d9394494a4d5e819a5bc550e287d785c51d7699688618a277f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120880

Malicious code in ursa-charon-server-markdown-pdf npm...

Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111812

Malicious code in leda-version-charon-command npm...

EUVD-2025-111303

Malicious code in meissa-lint-charon-ceres npm...

EUVD-2025-112062

Malicious code in jupiter-bunyan-tool-charon npm...

EUVD-2025-111876

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...

Malicious code in callback-venus-flare-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-mdx-mdx-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3feffdbab66463b83704d077bda0e4f7018d3e997c56702ac197352b5b38ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...