EUVD-2025-176197

Malicious code in stratosphere-outercore-carpo-adonis npm...

MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179581

Malicious code in convict-ultra-paleoceanography-carpo npm...

EUVD-2025-179131

Malicious code in enif-frontend-carpo-galaxy npm...

EUVD-2025-179898

Malicious code in callback-zephyr-semantic-ui-carpo npm...

EUVD-2025-179876

Malicious code in carpo-hermes-firebase-nightmare npm...

EUVD-2025-179873

Malicious code in carpo-release-it-oberon-halley npm...

EUVD-2025-179874

Malicious code in carpo-mdx-comet-hyperion npm...

Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-lynx-sirius-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a61b45a733442dad2bee78073691142efef575d4be2352de5061b96005b2b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176964

Malicious code in proxima-dotenv-safe-carpo-release-it npm...

EUVD-2025-175583

Malicious code in webpack-xenon-relay-carpo npm...

Malicious code in transform-carpo-charon-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180075

Malicious code in biogeochemistry-carpo-alphard-pulsar npm...

EUVD-2025-175913

Malicious code in transform-carpo-charon-hapi npm...

EUVD-2025-179630

Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...

EUVD-2025-176415

Malicious code in server-carpo-carpo-cosmicray npm...

EUVD-2025-179932

Malicious code in bunyan-release-it-carpo-request npm...

EUVD-2025-179838

Malicious code in celeste-selenology-socketio-carpo npm...

EUVD-2025-178631

Malicious code in gulp-javascript-carpo-markdown-pdf npm...