EUVD-2025-176631

Malicious code in rimraf-jupiter-carpo-phylogenetics npm...

EUVD-2025-179838

Malicious code in celeste-selenology-socketio-carpo npm...

EUVD-2025-179875

Malicious code in carpo-lynx-sirius-sirius npm...

EUVD-2025-176415

Malicious code in server-carpo-carpo-cosmicray npm...

Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178424

Malicious code in indus-farout-carpo-astrobiology npm...

EUVD-2025-179243

Malicious code in draco-gacrux-carpo-await npm...

EUVD-2025-179581

Malicious code in convict-ultra-paleoceanography-carpo npm...

MAL-2025-185984 Malicious code in callback-zephyr-semantic-ui-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ae303ee981c1075c7fce2279b092cf996dc5af84dcd3a3fbe2c0c2f2810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186932 Malicious code in extremophile-fornax-quasar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d88a6750f997b6922c6e43621f0149719c6dd1780dcde55c9fa55d9aeb2e800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178631

Malicious code in gulp-javascript-carpo-markdown-pdf npm...

EUVD-2025-175583

Malicious code in webpack-xenon-relay-carpo npm...

EUVD-2025-179877

Malicious code in carpo-aurora-pegasus-sqlite npm...

EUVD-2025-178950

Malicious code in extremophile-fornax-quasar-carpo npm...

EUVD-2025-179873

Malicious code in carpo-release-it-oberon-halley npm...

EUVD-2025-179131

Malicious code in enif-frontend-carpo-galaxy npm...

EUVD-2025-178844

Malicious code in fornax-transport-webdriver-manager-carpo npm...

EUVD-2025-175913

Malicious code in transform-carpo-charon-hapi npm...

Malicious code in carpo-aurora-pegasus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac582d924e3111b56cd0c197fa28379cc4fcd4edc8ea795336dd44a1bd430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...