EUVD-2025-122719

Malicious code in relay-loopback-electron-builder-chalk npm...

EUVD-2025-111651

Malicious code in lint-staged-pegasus-chalk-spectron npm...

EUVD-2025-115470

Malicious code in chalk-ganymede-delphinus-javascript npm...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144844 Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115474

Malicious code in chalk-cosmiconfig-kinetic-lint npm...

EUVD-2025-115012

Malicious code in cordelia-chalk-warp-reveal-md npm...

EUVD-2025-115457

Malicious code in chalk-miranda-stream-ursa npm...

Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112576

Malicious code in impulse-chalk-browserify-loopback npm...

EUVD-2025-124199

Malicious code in oauth-bellatrix-chalk-luna npm...

EUVD-2025-123027

Malicious code in quantum-avior-chalk-magellan npm...

MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115701

Malicious code in carina-chalk-init-astro npm...

EUVD-2025-121089

Malicious code in typeorm-chalk-eslint-config-geckodriver npm...

EUVD-2025-114425

Malicious code in dorado-chalk-canopus-exec npm...

EUVD-2025-123422

Malicious code in prettier-polaris-avior-chalk npm...

Malicious code in chalk-ganymede-postgres-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1009d64190f9c6b9bc8272ae2b4ae56996f71e14bda1fc7a4695aabf713ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140207 Malicious code in bulma-chalk-babel-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de7c2533236ca1f801bf030137850defec575a679cb06bce65de87c0e3e9c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143114 Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...