EUVD-2025-124532

Malicious code in neptune-version-eris-kronos npm...

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368597f4fc071540df5055bfc1b610466dcee895e63bbc57931f47cc3a3f0769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113985

Malicious code in equinox-kronos-kinetic-dactyl npm...

EUVD-2025-116236

Malicious code in babel-kronos-xenon-fetch npm...

EUVD-2025-123382

Malicious code in private-radiant-cosmos-kronos npm...

EUVD-2025-114281

Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...

EUVD-2025-116597

Malicious code in apollo-docusaurus-postgres-kronos npm...

EUVD-2025-111899

Malicious code in kronos-async-library-io npm...

EUVD-2025-121901

Malicious code in soap-kronos-altair-husky npm...

Malicious code in typeorm-quito-kronos-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa15073daad5e8a60298fbc642c1ae162fa2de4f67fd522d7d20ce9811065b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115313

Malicious code in cli-flare-kronos-dotenv npm...

EUVD-2025-111884

Malicious code in kronos-terser-carpo-nconf npm...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113306

Malicious code in ganymede-kronos-oauth-eslint-plugin npm...

EUVD-2025-120600

Malicious code in webdriver-manager-node-config-kronos-prettier npm...

EUVD-2025-111895

Malicious code in kronos-gridsome-eslint-plugin-forever npm...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113692

Malicious code in farout-kronos-xml-aurora npm...

EUVD-2025-124796

Malicious code in mongodb-csv-hexo-kronos npm...