248 matches found
MAL-2025-142700 Malicious code in frontend-carpo-yaml-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142079 Malicious code in envconfig-mira-carpo-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6368a46c8d4b8201f4df6cacad6539edd4ae6b601e9188e95b4f4417da8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112962
Malicious code in halley-jovian-carpo-sadr npm...
EUVD-2025-112524
Malicious code in ini-event-carpo-meteor npm...
EUVD-2025-115669
Malicious code in carpo-docusaurus-run-script-aldebaran npm...
EUVD-2025-115657
Malicious code in carpo-npm-jsonp-equinox npm...
EUVD-2025-115666
Malicious code in carpo-ganymede-kastra-leda npm...
EUVD-2025-121362
Malicious code in test-convict-jsonp-carpo npm...
EUVD-2025-115677
Malicious code in carpo-async-ganymede-init npm...
Malicious code in less-socketio-loglevel-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260abb768f8062126b91ed7c1e0822ea7d2cd0490e64c0ef6d0235f618e5ccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115668
Malicious code in carpo-elara-non-blocking-upgrade npm...
EUVD-2025-115675
Malicious code in carpo-blaze-dagda-command npm...
EUVD-2025-121281
Malicious code in thuban-development-carpo-loglevel npm...
EUVD-2025-116416
Malicious code in auriga-query-solis-carpo npm...
EUVD-2025-120964
Malicious code in uninstall-prompts-carpo-auriga npm...
EUVD-2025-124570
Malicious code in neptune-algol-carpo-ariel npm...