EUVD-2025-115654

Malicious code in carpo-subscription-meteor-bootstrap npm...

EUVD-2025-115674

Malicious code in carpo-blitz-nightmare-forever npm...

EUVD-2025-115679

Malicious code in carpo-adonis-draco-process npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

EUVD-2025-124399

Malicious code in node-config-upgrade-library-carpo npm...

EUVD-2025-121242

Malicious code in titan-nashira-achernar-carpo npm...

EUVD-2025-113044

Malicious code in grunt-pegasus-carpo-soap npm...

EUVD-2025-115212

Malicious code in command-astro-carpo-webdriverio npm...

EUVD-2025-115657

Malicious code in carpo-npm-jsonp-equinox npm...

EUVD-2025-113012

Malicious code in grus-publish-carpo-postgres npm...

EUVD-2025-124722

Malicious code in mui-carpo-publish-neptune npm...

EUVD-2025-124570

Malicious code in neptune-algol-carpo-ariel npm...

EUVD-2025-113946

Malicious code in eris-carpo-changelog-winston npm...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-helios-carpo-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc2186a8b8d2cef5c43c813a9358578692c3659d29973ad9eafd99ac01cad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121532

Malicious code in supervisor-koa-carpo-hugo npm...

EUVD-2025-115661

Malicious code in carpo-jest-celeste-blaze npm...

EUVD-2025-114483

Malicious code in development-nova-carpo-quark npm...

EUVD-2025-121281

Malicious code in thuban-development-carpo-loglevel npm...

EUVD-2025-116134

Malicious code in betelgeuse-betelgeuse-carpo-vortex npm...