MAL-2025-185866 Malicious code in blueshift-publish-carina-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175646

Malicious code in wasat-carina-shelljs-sqlite npm...

EUVD-2025-178626

Malicious code in gulp-rollup-plugin-carina-csv npm...

MAL-2025-186003 Malicious code in carina-solis-ultra-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd53fa33a8f12455a525df8cb7c7ad2cdcc564bbfe5f34a826d792195879d9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177553

Malicious code in nodejs-sass-loader-carina-duplex npm...

EUVD-2025-177105

Malicious code in polaris-typeorm-carina-solarnebula npm...

EUVD-2025-177021

Malicious code in promise-carina-astroinformatics-regulus npm...

EUVD-2025-178592

Malicious code in hawkingradiation-carina-oortcloud-gammarayburst npm...

EUVD-2025-179655

Malicious code in command-axios-asteroid-carina npm...

EUVD-2025-179245

Malicious code in draco-convict-carina-superagent npm...

EUVD-2025-180466

Malicious code in aldebaran-resolvers-rehype-carina npm...

EUVD-2025-180016

Malicious code in blueshift-publish-carina-nconf npm...

EUVD-2025-179938

Malicious code in bunyan-carina-adonis-mysql npm...

EUVD-2025-179879

Malicious code in carina-solis-ultra-rimraf npm...

Malicious code in blueshift-publish-carina-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175936

Malicious code in titan-iota-carina-vuepress npm...

EUVD-2025-177262

Malicious code in perseus-carina-duplex-bellatrix npm...

EUVD-2025-176155

Malicious code in subscription-carina-standard-exec npm...

EUVD-2025-179878

Malicious code in carina-telesto-taurus-cladistics npm...