MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112020

Malicious code in karma-aether-betelgeuse-webdriver-manager npm...

EUVD-2025-120583

Malicious code in webdriver-mocha-deneb-transform-karma npm...

EUVD-2025-124201

Malicious code in nuxtjs-webdriver-manager-nestjs-karma npm...

EUVD-2025-112000

Malicious code in karma-lacerta-loopback-karma npm...

EUVD-2025-114440

Malicious code in docusaurus-kinetic-leda-karma npm...

EUVD-2025-111990

Malicious code in karma-websockets-kastra-europa npm...

EUVD-2025-121052

Malicious code in uglify-js-nuxtjs-karma-atlas npm...

EUVD-2025-112015

Malicious code in karma-cypress-pyxis-redis npm...

EUVD-2025-124665

Malicious code in mysql-lynx-bellatrix-karma npm...

Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115942

Malicious code in buffer-mutation-changelog-karma npm...

EUVD-2025-111993

Malicious code in karma-spawn-webpack-yonder npm...

EUVD-2025-111998

Malicious code in karma-phenomic-standard-mdx npm...

MAL-2025-139257 Malicious code in airbnb-karma-lynx-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05e1e5527ea26a244d15e0aa5a7e08fb9668682cb3c6840370ec54b8aafc6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111997

Malicious code in karma-pipe-leda-ignite npm...

Malicious code in karma-pipe-leda-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737a5e0e5e3b86f535e6d2720d1b3848b751f4c3cadf9db24437aa6bfeadaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148991 Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120938

Malicious code in update-blitz-karma-auth npm...