EUVD-2025-112962

Malicious code in halley-jovian-carpo-sadr npm...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122167

Malicious code in sedna-carpo-command-postcss-loader npm...

EUVD-2025-112265

Malicious code in jasmine-carpo-scorpius-halley npm...

EUVD-2025-121451

Malicious code in taurus-postcss-carpo-unuk npm...

EUVD-2025-114031

Malicious code in envconfig-mira-carpo-procyon npm...

Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115679

Malicious code in carpo-adonis-draco-process npm...

MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148477 Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147757 Malicious code in sedna-carpo-yaml-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7c4c234095f395661d4444c8c4bcc25c5188dc121201acf2d56d355773a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144588 Malicious code in luna-xenos-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149238 Malicious code in vulcan-helios-carpo-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc2186a8b8d2cef5c43c813a9358578692c3659d29973ad9eafd99ac01cad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143100 Malicious code in grus-publish-carpo-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd94f3729b81ded334235fb18dadc466b5abd53f0bdb204d86788c6d9c1941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-init-carpo-transform (npm)

The package kronos-init-carpo-transform was found to contain malicious code...

MAL-2025-44902 Malicious code in kronos-init-carpo-transform (npm)

The package kronos-init-carpo-transform was found to contain malicious code...

Malicious code in mutation-fork-cressida-carpo (npm)

The package mutation-fork-cressida-carpo was found to contain malicious code...

Malicious code in pino-pretty-antares-koa-carpo (npm)

The package pino-pretty-antares-koa-carpo was found to contain malicious code...