EUVD-2025-115462

Malicious code in chalk-kaus-despina-chariklo npm...

EUVD-2025-115471

Malicious code in chalk-elara-mutation-protractor npm...

EUVD-2025-120903

Malicious code in upgrade-pegasus-chalk-fomalhaut npm...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112134

Malicious code in json-passport-eslint-config-chalk npm...

EUVD-2025-112576

Malicious code in impulse-chalk-browserify-loopback npm...

EUVD-2025-115470

Malicious code in chalk-ganymede-delphinus-javascript npm...

EUVD-2025-111271

Malicious code in mensa-chalk-neptune-config npm...

EUVD-2025-124317

Malicious code in non-blocking-chalk-fornax-spinner npm...

EUVD-2025-115701

Malicious code in carina-chalk-init-astro npm...

EUVD-2025-123631

Malicious code in pm2-airbnb-rollup-chalk npm...

Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121613

Malicious code in stream-chalk-elara-node-config npm...

Malicious code in eris-chalk-kaus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90adeb8f738082faa8a3feb2275ba022c13d51ef8f71a33c1232ee80fe25f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115447

Malicious code in chalk-wasat-juno-materialize npm...

EUVD-2025-124613

Malicious code in nconf-chalk-jabbah-gacrux npm...

Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146382 Malicious code in postcss-chalk-cassini-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd5f2d5d3d3bf33c23a3ca41571ccc6d77668f774fa2b3c8985024b5ed6051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140652 Malicious code in chalk-passport-xo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c244aa0a095f7a8205087c80d788004f74f73da527c4e42c8759dda5f0d3a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...