346 matches found
Malicious code in luna-umbra-chalk-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121089
Malicious code in typeorm-chalk-eslint-config-geckodriver npm...
EUVD-2025-115474
Malicious code in chalk-cosmiconfig-kinetic-lint npm...
Malicious code in chalk-ignite-polaris-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe54ef9c61fe29b0ec4ddb152fb7d650282d6a50b1ec8cfc5a45af0115c4b198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111528
Malicious code in luna-umbra-chalk-auriga npm...
EUVD-2025-115897
Malicious code in bulma-chalk-babel-oberon npm...
EUVD-2025-113944
Malicious code in eris-chalk-kaus-winston npm...
EUVD-2025-112232
Malicious code in javascript-loglevel-chalk-soap npm...
Malicious code in chalk-dactyl-orbit-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121877
Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...
EUVD-2025-115273
Malicious code in cluster-rigel-pino-chalk npm...
EUVD-2025-115451
Malicious code in chalk-sirius-commitlint-hapi npm...
EUVD-2025-115450
Malicious code in chalk-sqlite-perseus-server npm...
Malicious code in await-janus-chalk-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7173d4aadc73cc2abb8592799f4e82a48e637f593e78b5e8f51a5107f7e5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115468
Malicious code in chalk-ganymede-postgres-publish npm...
EUVD-2025-115455
Malicious code in chalk-passport-xo-mensa npm...
EUVD-2025-114495
Malicious code in development-chalk-rate-limiter-colors npm...
Malicious code in fetch-chalk-mysql-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...