MAL-2025-186082 Malicious code in chai-node-sass-biosignature-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175499

Malicious code in xenos-chai-changelog-helmet npm...

EUVD-2025-115524

Malicious code in chai-ariel-leda-remark npm...

EUVD-2025-115505

Malicious code in chai-procyon-postcss-loader-forever npm...

EUVD-2025-122912

Malicious code in radiant-chai-mocha-pulsar npm...

EUVD-2025-121831

Malicious code in spawn-chai-ursa-eslint npm...

Malicious code in leda-npm-chai-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf16bec19825fcb8796255ce3e4faa961efe40d86c0ee3f1bb66bf1526ccb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111396

Malicious code in markdownlint-algol-chai-terser-webpack-plugin npm...

EUVD-2025-116173

Malicious code in bellatrix-chai-deneb-cross-env npm...

EUVD-2025-116060

Malicious code in blitz-dotenv-safe-chai-ganymede npm...

EUVD-2025-115523

Malicious code in chai-astro-vega-husky npm...

Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113115

Malicious code in graphql-chai-schema-elara npm...

EUVD-2025-121986

Malicious code in sirius-chai-draco-taurus npm...

EUVD-2025-116200

Malicious code in barnard-chai-public-loglevel npm...

EUVD-2025-124498

Malicious code in nextjs-procyon-postcss-chai npm...

EUVD-2025-123775

Malicious code in phoebe-chai-markdownlint-deneb npm...

EUVD-2025-112696

Malicious code in husky-figures-bellatrix-chai npm...

Malicious code in chai-fomalhaut-private-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781047d4551dc9d1deb64ba4272f99d47e9ca836fd15539dad0480398af18e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...