346 matches found
MAL-2025-140208 Malicious code in bulma-chalk-rate-limiter-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-uglify-js-gemini-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-chalk-start-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868610eb2e497f1941e3a94420f69d69cc0eb1e42a0a4f0a26955526bc7a81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ceres-configstore-jwt-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148915 Malicious code in umbra-chalk-zenith-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9f0749f6807047fc716098a7e59564eff5af9f83ed200b75d93cccbcbbf8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140636 Malicious code in chalk-elara-mutation-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b30dee8c82bfcebcb435e5df8978d0fc0d4f8bca09af47446eaa856d90dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115548
Malicious code in ceres-configstore-jwt-chalk npm...
EUVD-2025-115461
Malicious code in chalk-kaus-eslint-helios npm...
MAL-2025-140002 Malicious code in betelgeuse-rest-zenobia-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312b4b549a005aa9da1a046674b721c77a5bbad4255dfc8af6bbe1b7c3649daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148868 Malicious code in uglify-js-chalk-spica-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b881fb56e4e5e9ec3ca7c82173f3ee21d88ef3c5d395f2dc0a52edd7b49e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144844 Malicious code in mensa-chalk-neptune-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111651
Malicious code in lint-staged-pegasus-chalk-spectron npm...
EUVD-2025-115012
Malicious code in cordelia-chalk-warp-reveal-md npm...
Malicious code in castor-weywot-kinetic-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605d01f551afbf8089d533da8ae43aadc17b013cf9d50c733fa3813e9fe98845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121464
Malicious code in taurus-castor-jasmine-chalk npm...