MAL-2025-140448 Malicious code in carpo-meteor-nconf-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112524

Malicious code in ini-event-carpo-meteor npm...

EUVD-2025-115659

Malicious code in carpo-meteor-nconf-uninstall npm...