309 matches found
EUVD-2025-121770
Malicious code in spica-charon-perseus-local npm...
EUVD-2025-115367
Malicious code in charon-webdriver-mocha-grunt-kinetic npm...
EUVD-2025-120859
Malicious code in ursa-rehype-charon-eslint-plugin npm...
EUVD-2025-122911
Malicious code in radiant-charon-jwt-restart npm...
EUVD-2025-124084
Malicious code in ophiuchus-publish-charon-private npm...
EUVD-2025-111808
Malicious code in less-arcturus-charon-markdown-pdf npm...
EUVD-2025-116627
Malicious code in apex-charon-bellatrix-npm npm...
EUVD-2025-116831
Malicious code in aldebaran-charon-pegasus-heka npm...
EUVD-2025-115375
Malicious code in charon-redis-ariel-commitlint npm...
MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140740 Malicious code in charon-webdriver-mocha-grunt-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308379036cdc53ec430eb0d1e47cedc9ca3c2b9194b920dcc15406345ba5638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146676 Malicious code in prompts-wasat-charon-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143919 Malicious code in jest-corvus-prettier-plugin-markdown-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f8a207732818d652c646d15170f2d870f89c960977bc4b478e309eca2f1422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149882 Malicious code in zephyr-charon-draco-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ed338c2debeeda0e1406d49dd402a5cca90b1cca0aa88d2480ec73c64a6d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148155 Malicious code in spica-charon-perseus-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19137bc29e8d26057720cd37eada1f3debb2ca67b9358bcc23f58791b8160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144535 Malicious code in loop-solis-charon-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140742 Malicious code in charon-yildun-io-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69188dbff2a3d9d5fda5e3ec66c33f9b5431c4a8271d1fb7ccb64cbe4bd7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...