EUVD-2025-116303

Malicious code in await-janus-chalk-magellan npm...

Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115465

Malicious code in chalk-hydra-parcel-prompts npm...

EUVD-2025-115460

Malicious code in chalk-loglevel-io-upgrade npm...

EUVD-2025-114495

Malicious code in development-chalk-rate-limiter-colors npm...

EUVD-2025-115467

Malicious code in chalk-gemini-nconf-cz-conventional-changelog npm...

EUVD-2025-124222

Malicious code in nuxtjs-chalk-start-jovian npm...

EUVD-2025-121060

Malicious code in uglify-js-chalk-spica-zenith npm...

EUVD-2025-116100

Malicious code in betelgeuse-rest-zenobia-chalk npm...

EUVD-2025-124317

Malicious code in non-blocking-chalk-fornax-spinner npm...

EUVD-2025-120903

Malicious code in upgrade-pegasus-chalk-fomalhaut npm...

Malicious code in dorado-uglify-js-gemini-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115472

Malicious code in chalk-draco-wezen-canopus npm...

EUVD-2025-111259

Malicious code in mensa-janus-chalk-nebula npm...

Malicious code in ini-chalk-cors-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056bc82713174866f848920d37b5631378c0586896ed08ae0f33e06e27aaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115454

Malicious code in chalk-procyon-nebula-lint npm...

EUVD-2025-112232

Malicious code in javascript-loglevel-chalk-soap npm...

EUVD-2025-115466

Malicious code in chalk-gulp-helmet-andromeda npm...

EUVD-2025-124613

Malicious code in nconf-chalk-jabbah-gacrux npm...