Malicious code in ini-event-carpo-meteor (npm)

Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in carpo-meteor-nconf-uninstall (npm)

Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-112524

Malicious code in ini-event-carpo-meteor npm...

EUVD-2025-115659

Malicious code in carpo-meteor-nconf-uninstall npm...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140448 Malicious code in carpo-meteor-nconf-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...