EUVD-2025-112420

Malicious code in io-charon-dactyl-pyxis npm...

EUVD-2025-121191

Malicious code in tool-jabbah-promise-charon npm...

EUVD-2025-116926

Malicious code in acamar-jasmine-phoebe-charon npm...

EUVD-2025-115390

Malicious code in charon-apollo-ganymede-zenobia npm...

EUVD-2025-123879

Malicious code in pegasus-mongoose-nconf-charon npm...

EUVD-2025-113622

Malicious code in firebase-charon-node-config-delphinus npm...

EUVD-2025-122083

Malicious code in semantic-ui-charon-sirius-yakutsk npm...

EUVD-2025-124062

Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon npm...

EUVD-2025-123593

Malicious code in polaris-charon-delphinus-dorado npm...

EUVD-2025-115388

Malicious code in charon-configstore-polaris-dependencies npm...

EUVD-2025-114219

Malicious code in electron-altair-charon-pegasus npm...

Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115370

Malicious code in charon-thuban-axios-thuban npm...

EUVD-2025-116909

Malicious code in achernar-charon-triton-stream npm...

EUVD-2025-115319

Malicious code in cli-charon-hyperion-flare npm...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-publish-charon-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859855906fa5998d0602074884a3f159e91c73027f4acfd3770d9a1b8e1f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112120

Malicious code in jsonp-charon-warp-fetch npm...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...