EUVD-2025-116270

Malicious code in axios-karma-mensa-magellan npm...

EUVD-2025-123569

Malicious code in polaris-karma-hermes-galaxy npm...

EUVD-2025-124640

Malicious code in nashira-karma-husky-ceres npm...

EUVD-2025-112013

Malicious code in karma-deneb-eslint-plugin-public npm...

EUVD-2025-115075

Malicious code in config-ophiuchus-karma-centaurus npm...

EUVD-2025-112001

Malicious code in karma-kronos-protractor-graphql npm...

MAL-2025-144106 Malicious code in karma-fornax-sequelize-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665eee411bdf1ee3767b099ec85214a9d2342dd070d8f6b793e26e4c92f55e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142939 Malicious code in global-karma-socketio-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0241b4284d51930d8f79f4a26732e32fd0daa7662b27526d3f2e8df46389bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111993

Malicious code in karma-spawn-webpack-yonder npm...

EUVD-2025-112007

Malicious code in karma-fornax-sequelize-ophiuchus npm...

EUVD-2025-112019

Malicious code in karma-atlas-bulma-ini npm...

Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123960

Malicious code in parcel-karma-remark-castor npm...

EUVD-2025-112010

Malicious code in karma-electron-builder-blitz-lacerta npm...

EUVD-2025-115152

Malicious code in commitlint-config-angular-apollo-sequelize-karma npm...

Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144112 Malicious code in karma-kronos-protractor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2613bf60636387829ca0905577e948da2806d337f061920b907c9fc948430379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...