EUVD-2025-114362

Malicious code in dotenv-safe-dactyl-mira-karma npm...

EUVD-2025-111995

Malicious code in karma-quasar-io-europa npm...

EUVD-2025-111140

Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...

EUVD-2025-116425

Malicious code in auriga-figures-karma-ursa npm...

EUVD-2025-112018

Malicious code in karma-build-sass-loader-kastra npm...

EUVD-2025-111472

Malicious code in magellan-karma-barnard-lint npm...

EUVD-2025-114548

Malicious code in deneb-ursa-karma-javascript npm...

EUVD-2025-111997

Malicious code in karma-pipe-leda-ignite npm...

Malicious code in pyxis-karma-sadr-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65565387abe4beae136845f7afff20c393733be49cf9495c468578986e4cace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112006

Malicious code in karma-galaxy-proxima-bunyan npm...

EUVD-2025-116845

Malicious code in airbnb-karma-lynx-lint-staged npm...

EUVD-2025-123016

Malicious code in quantum-karma-eslint-plugin-javascript npm...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111353

Malicious code in mdx-comet-vortex-karma npm...

EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

EUVD-2025-120583

Malicious code in webdriver-mocha-deneb-transform-karma npm...

MAL-2025-139257 Malicious code in airbnb-karma-lynx-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05e1e5527ea26a244d15e0aa5a7e08fb9668682cb3c6840370ec54b8aafc6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147002 Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...