EUVD-2025-124408

Malicious code in node-config-kronos-miranda-loopback npm...

Malicious code in hexo-hugo-apollo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16946d8f8da98f1687d1b1461a244ac238e04e289dfe13b355f2cdc196d724c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121190

Malicious code in tool-kronos-cosmos-sass-loader npm...

Malicious code in await-quark-kronos-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb669fdd0ea4a80ca906fef4eea67f07faf499b07671c17f6f33b31f08a56396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121817

Malicious code in spawn-wasat-kronos-child-process npm...

EUVD-2025-116297

Malicious code in await-quark-kronos-jsonp npm...

EUVD-2025-111891

Malicious code in kronos-library-jasmine-spectron npm...

Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120600

Malicious code in webdriver-manager-node-config-kronos-prettier npm...

EUVD-2025-114953

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin npm...

Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114281

Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...

Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

EUVD-2025-113456

Malicious code in fornax-test-kronos-ganymede npm...

EUVD-2025-113306

Malicious code in ganymede-kronos-oauth-eslint-plugin npm...

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368597f4fc071540df5055bfc1b610466dcee895e63bbc57931f47cc3a3f0769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...