EUVD-2025-115898

Malicious code in bulma-buffer-janus-chariklo npm...

MAL-2025-141237 Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121686

Malicious code in sqlite-semantic-release-chariklo-mysql npm...

EUVD-2025-120269

Malicious code in xenon-shelljs-chariklo-loglevel npm...

EUVD-2025-115395

Malicious code in chariklo-scripts-gridsome-cosmos npm...

EUVD-2025-111321

Malicious code in meissa-bellatrix-izar-chariklo npm...

EUVD-2025-112341

Malicious code in jabbah-chariklo-odin-zephyr npm...

EUVD-2025-115410

Malicious code in chariklo-hyperion-xml-acamar npm...

EUVD-2025-115838

Malicious code in cache-chariklo-gatsby-arcturus npm...

EUVD-2025-120808

Malicious code in venus-reveal-md-chariklo-readable npm...

EUVD-2025-112193

Malicious code in jest-cygnus-chariklo-rimraf npm...

EUVD-2025-120796

Malicious code in version-chakra-ui-chariklo-rehype npm...

EUVD-2025-115408

Malicious code in chariklo-ignite-winston-node-sass npm...

EUVD-2025-123584

Malicious code in polaris-epimetheus-chariklo-apollo npm...

Malicious code in sagitta-xenon-chariklo-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed567406ad5a8211787995ba5481b7eadb7b526a75d40ee56105a29adc3752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124720

Malicious code in mui-css-minimizer-webpack-plugin-chariklo-nashira npm...

EUVD-2025-113708

Malicious code in farout-chariklo-jasmine-cosmiconfig npm...

EUVD-2025-123916

Malicious code in pavo-pino-pretty-chariklo-repository npm...

EUVD-2025-120952

Malicious code in unuk-chariklo-pm2-tool npm...

Malicious code in jest-cygnus-chariklo-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896f80547b404fb50cbadc8829b66a71a8905c7345dbd84caa6331254ca7f91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...