Malicious code in chariklo-ignite-less-cygnus (npm)

Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chariklo-ignite-winston-node-sass (npm)

Source: amazon-inspector 7f75b524423bbece3f6f6bfed495a0fc57255e0364a4577faa045017ad3ae3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-115409

Malicious code in chariklo-ignite-less-cygnus npm...