EUVD-2025-115392

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin npm...

EUVD-2025-120979

Malicious code in umbriel-umbra-centauri-chariklo npm...

EUVD-2025-111159

Malicious code in middleware-fornax-cache-chariklo npm...

EUVD-2025-116207

Malicious code in backend-run-script-chariklo-centauri npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-121686

Malicious code in sqlite-semantic-release-chariklo-mysql npm...

EUVD-2025-112193

Malicious code in jest-cygnus-chariklo-rimraf npm...

Malicious code in gravity-chariklo-library-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115397

Malicious code in chariklo-repository-jwt-norma npm...

EUVD-2025-115869

Malicious code in bulma-webdriver-mocha-chariklo-graphql npm...

EUVD-2025-120814

Malicious code in venus-materialize-middleware-chariklo npm...

EUVD-2025-122336

Malicious code in sagitta-chariklo-neptune-sirius npm...

EUVD-2025-113727

Malicious code in express-meteor-colors-chariklo npm...

EUVD-2025-114872

Malicious code in cressida-loopback-chromedriver-chariklo npm...

EUVD-2025-115414

Malicious code in chariklo-concurrently-adonis-neptune npm...

EUVD-2025-120931

Malicious code in update-kinetic-comet-chariklo npm...

EUVD-2025-113155

Malicious code in google-csv-bellatrix-chariklo npm...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-kinetic-comet-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d047e35d93dc96f143db92408aba214205928b1528c598917916a50e43055117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-chariklo-odin-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c2d50e67cbc5f2bb004a64214b90e5ef969a05f10b98fa932df4236c8f8ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...