345 matches found
EUVD-2025-115158
Malicious code in commitizen-webdriverio-chalk-figures npm...
EUVD-2025-115469
Malicious code in chalk-ganymede-dependencies-oauth npm...
EUVD-2025-112998
Malicious code in gulp-cluster-chalk-phoenix npm...
EUVD-2025-115458
Malicious code in chalk-mini-css-extract-plugin-await-xo npm...
EUVD-2025-124342
Malicious code in nodemon-chalk-standard-cordelia npm...
EUVD-2025-115459
Malicious code in chalk-lynx-alphard-virgo npm...
EUVD-2025-121464
Malicious code in taurus-castor-jasmine-chalk npm...
Malicious code in chalk-ursa-leda-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6ec642046a778fe5cd41330acbc46e330ab9944a2ca56be7bd85413f74fbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quantum-avior-chalk-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115461
Malicious code in chalk-kaus-eslint-helios npm...
EUVD-2025-113944
Malicious code in eris-chalk-kaus-winston npm...
Malicious code in fetch-chalk-mysql-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115473
Malicious code in chalk-dactyl-orbit-standard npm...
EUVD-2025-112731
Malicious code in hugo-chalk-rigel-phoebe npm...
EUVD-2025-123539
Malicious code in postcss-chalk-cassini-hugo npm...
Malicious code in stream-chalk-elara-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115609
Malicious code in castor-weywot-kinetic-chalk npm...
Malicious code in chalk-sirius-commitlint-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bba1e8688eb4ecf682073f2e20d6832d25b7acebe1f8a59e848fc460540dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...