EUVD-2025-115365

Malicious code in charon-yildun-io-chariklo npm...

Malicious code in scorpius-chariklo-nextjs-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3accdb3220250ef79e197b795a03b196b4c924a07d04d83687cce7a3762d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115401

Malicious code in chariklo-pegasus-ceres-procyon npm...

EUVD-2025-115392

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115415

Malicious code in chariklo-betelgeuse-uninstall-inquirer npm...

EUVD-2025-115911

Malicious code in build-terser-chariklo-jsonp npm...

EUVD-2025-115393

Malicious code in chariklo-spectron-corvus-scorpius npm...

EUVD-2025-120979

Malicious code in umbriel-umbra-centauri-chariklo npm...

EUVD-2025-122968

Malicious code in quasar-jwt-chariklo-virgo npm...

EUVD-2025-120931

Malicious code in update-kinetic-comet-chariklo npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

EUVD-2025-115898

Malicious code in bulma-buffer-janus-chariklo npm...

EUVD-2025-112730

Malicious code in hugo-chariklo-oauth-carina npm...

EUVD-2025-114882

Malicious code in cressida-cygnus-chariklo-magellan npm...

EUVD-2025-123847

Malicious code in perseus-chariklo-webpack-despina npm...

EUVD-2025-115413

Malicious code in chariklo-deneb-helmet-meteor npm...

EUVD-2025-120059

Malicious code in zenobia-sails-chariklo-quark npm...

EUVD-2025-121686

Malicious code in sqlite-semantic-release-chariklo-mysql npm...

Malicious code in quasar-jwt-chariklo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e96037d1d468c6657b8199569db480a0d764b88149d9dc46c87c1d8bfd2d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...