MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144216 Malicious code in kronos-deimos-regulus-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b31749f80770b26fa35f08da80af73a65c32d2878ca4298b76f5e4c6188b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116346

Malicious code in auth0-sagitta-koa-kronos npm...

EUVD-2025-116475

Malicious code in async-hyperion-blaze-kronos npm...

EUVD-2025-116382

Malicious code in auth-delphinus-yildun-kronos npm...

Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113456

Malicious code in fornax-test-kronos-ganymede npm...

Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144231 Malicious code in kronos-webdriver-manager-celeste-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa7ea599966a12e7050333baf3e7fda0daee36bcfae5ad1fdf31c994c1185f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122084

Malicious code in semantic-release-update-kronos-rest npm...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144228 Malicious code in kronos-spinner-io-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6884e2ffd1ffed28fa9c2fef656a4ed395be617c7b381ebd411f4cecbb78a380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111887

Malicious code in kronos-sirius-process-koa npm...

Malicious code in izar-kronos-install-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea54134ffabf460a9db7eea0d45b80e997abc846234f08add6f687bcccf6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111888

Malicious code in kronos-sagitta-zenith-ganymede npm...

EUVD-2025-111883

Malicious code in kronos-umbriel-sass-loader-cassini npm...

Malicious code in soap-promise-kronos-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9cdc455bc15e8e73766bcb878c564f0d199998e4ce16dad81a8fd1e399d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...