EUVD-2025-175913

Malicious code in transform-carpo-charon-hapi npm...

EUVD-2025-179630

Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...

EUVD-2025-175583

Malicious code in webpack-xenon-relay-carpo npm...

MAL-2025-186008 Malicious code in carpo-mdx-comet-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595409170e260ff1842190bade73fd00f5722cb17fc89c590765a3a6244b293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176317

Malicious code in soap-slidev-carpo-restart npm...

EUVD-2025-179874

Malicious code in carpo-mdx-comet-hyperion npm...

Malicious code in carpo-lynx-sirius-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a61b45a733442dad2bee78073691142efef575d4be2352de5061b96005b2b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176197

Malicious code in stratosphere-outercore-carpo-adonis npm...

EUVD-2025-180075

Malicious code in biogeochemistry-carpo-alphard-pulsar npm...

Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177494

Malicious code in octans-cybernetics-carpo-norma npm...

EUVD-2025-179876

Malicious code in carpo-hermes-firebase-nightmare npm...

Malicious code in transform-carpo-charon-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179169

Malicious code in element-ui-fermiparadox-carpo-orogeny npm...

EUVD-2025-179898

Malicious code in callback-zephyr-semantic-ui-carpo npm...

EUVD-2025-176964

Malicious code in proxima-dotenv-safe-carpo-release-it npm...

MAL-2025-185807 Malicious code in biogeochemistry-carpo-alphard-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6ae68492781c51e2028c436dc6451385234e8dcd5c0047bca8aba4e03c5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185950 Malicious code in bunyan-release-it-carpo-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a0f1e12655c75f70e2c1d052cca1e4b0508a72ebf895e2f00f3b0db2b3a712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120691

Malicious code in vulcan-helios-carpo-local npm...

Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...