EUVD-2025-121076

Malicious code in typeorm-node-sass-karma-schema npm...

EUVD-2025-120360

Malicious code in writable-karma-kronos-run-script npm...

EUVD-2025-121081

Malicious code in typeorm-karma-zenobia-inquirer npm...

EUVD-2025-115748

Malicious code in canopus-config-karma-dagda npm...

EUVD-2025-116270

Malicious code in axios-karma-mensa-magellan npm...

EUVD-2025-122593

Malicious code in resolvers-karma-leda-io npm...

EUVD-2025-120095

Malicious code in yonder-iota-karma-protractor npm...

EUVD-2025-123569

Malicious code in polaris-karma-hermes-galaxy npm...

EUVD-2025-124640

Malicious code in nashira-karma-husky-ceres npm...

EUVD-2025-112002

Malicious code in karma-hermes-supervisor-sedna npm...

EUVD-2025-115075

Malicious code in config-ophiuchus-karma-centaurus npm...

MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143239 Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140358 Malicious code in canopus-config-karma-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123744

Malicious code in phoebe-run-script-subscription-karma npm...

MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144108 Malicious code in karma-ganymede-chalk-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819f1a214fd0d4e2d68030032a4a8261353707da867a164d5a15d4ad38aedf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144106 Malicious code in karma-fornax-sequelize-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...