EUVD-2025-179245

Malicious code in draco-convict-carina-superagent npm...

EUVD-2025-176150

Malicious code in subscription-playwright-public-carina npm...

EUVD-2025-179938

Malicious code in bunyan-carina-adonis-mysql npm...

MAL-2025-185866 Malicious code in blueshift-publish-carina-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177262

Malicious code in perseus-carina-duplex-bellatrix npm...

Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-publish-carina-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175646

Malicious code in wasat-carina-shelljs-sqlite npm...

EUVD-2025-180016

Malicious code in blueshift-publish-carina-nconf npm...

MAL-2025-189939 Malicious code in titan-iota-carina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54b5aeb01b3b85dda4f78f0dacbe1fafb98fef139ef198836d50da8dbcd7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179879

Malicious code in carina-solis-ultra-rimraf npm...

EUVD-2025-178626

Malicious code in gulp-rollup-plugin-carina-csv npm...

EUVD-2025-176155

Malicious code in subscription-carina-standard-exec npm...

EUVD-2025-175936

Malicious code in titan-iota-carina-vuepress npm...

EUVD-2025-179655

Malicious code in command-axios-asteroid-carina npm...

MAL-2025-188770 Malicious code in polaris-typeorm-carina-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd39e7155d8520a5724569d8afb03405c8267596fb7bf5b3a99361f880220d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178592

Malicious code in hawkingradiation-carina-oortcloud-gammarayburst npm...

EUVD-2025-177021

Malicious code in promise-carina-astroinformatics-regulus npm...

EUVD-2025-179474

Malicious code in csrf-carina-technocracy-areology npm...

EUVD-2025-180466

Malicious code in aldebaran-resolvers-rehype-carina npm...