Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112034

Malicious code in jwt-magellan-sedna-stop npm...

EUVD-2025-121636

Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall npm...

EUVD-2025-120448

Malicious code in winston-cache-stop-request npm...

MAL-2025-146701 Malicious code in protractor-ursa-stop-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123178

Malicious code in proxima-stop-chariklo-puppeteer npm...

EUVD-2025-116010

Malicious code in bootes-stop-transform-kronos npm...

EUVD-2025-114355

Malicious code in dotenv-safe-hermes-config-stop npm...

EUVD-2025-121623

Malicious code in stop-sadr-package-docusaurus npm...

MAL-2025-146372 Malicious code in polaris-stop-build-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-112073

Malicious code in juno-superagent-stop-antares npm...

EUVD-2025-121640

Malicious code in stop-aldebaran-sedna-luna npm...

EUVD-2025-122624

Malicious code in request-kronos-elektra-stop npm...

EUVD-2025-123303

Malicious code in procyon-tethys-epimetheus-stop npm...

EUVD-2025-121619

Malicious code in stop-transform-ultra-ultra npm...

Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-sadr-package-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe98cd66bb030ca2b79aa2740842daa964c75b133ea933f000f870dd53d20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...