EUVD-2025-177554

Malicious code in nodejs-radioastronomy-tailwindcss-chalk npm...

EUVD-2025-114441

Malicious code in docusaurus-ignite-chalk-global npm...

Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111271

Malicious code in mensa-chalk-neptune-config npm...

EUVD-2025-124613

Malicious code in nconf-chalk-jabbah-gacrux npm...

EUVD-2025-112576

Malicious code in impulse-chalk-browserify-loopback npm...

Malicious code in fetch-chalk-mysql-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115452

Malicious code in chalk-sedna-global-fornax npm...

EUVD-2025-115446

Malicious code in chalk-xanthus-repository-carpo npm...

EUVD-2025-115273

Malicious code in cluster-rigel-pino-chalk npm...

EUVD-2025-121962

Malicious code in sirius-nodejs-pino-chalk npm...

EUVD-2025-115455

Malicious code in chalk-passport-xo-mensa npm...

Malicious code in nuxtjs-chalk-start-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868610eb2e497f1941e3a94420f69d69cc0eb1e42a0a4f0a26955526bc7a81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123422

Malicious code in prettier-polaris-avior-chalk npm...

EUVD-2025-113668

Malicious code in fetch-event-cosmiconfig-chalk npm...

Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115897

Malicious code in bulma-chalk-babel-oberon npm...

EUVD-2025-114425

Malicious code in dorado-chalk-canopus-exec npm...

Malicious code in chalk-ganymede-postgres-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1009d64190f9c6b9bc8272ae2b4ae56996f71e14bda1fc7a4695aabf713ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...