250 matches found
MAL-2025-149238 Malicious code in vulcan-helios-carpo-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fc2186a8b8d2cef5c43c813a9358578692c3659d29973ad9eafd99ac01cad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115676
Malicious code in carpo-barnard-tethys-halley npm...
Malicious code in luna-xenos-relay-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115665
Malicious code in carpo-ganymede-yakutsk-lint-staged npm...
EUVD-2025-124131
Malicious code in odin-carpo-init-altair npm...
EUVD-2025-115674
Malicious code in carpo-blitz-nightmare-forever npm...
MAL-2025-145719 Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396e04392f9a76bac22dee614f1bfcbcd3cbf55bd09109b9d581980e115ba151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114483
Malicious code in development-nova-carpo-quark npm...
MAL-2025-147756 Malicious code in sedna-carpo-command-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a24b4b00f49c87b40537793e078710621ed57e859a9a24b4c06e73f4a01690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115746
Malicious code in canopus-ini-carpo-standard npm...
Malicious code in arcturus-toml-carpo-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124773
Malicious code in mongoose-altair-carpo-release-it npm...
EUVD-2025-111762
Malicious code in levels-carpo-fusion-pulsar npm...
EUVD-2025-111674
Malicious code in lint-ini-carpo-aldebaran npm...
EUVD-2025-112962
Malicious code in halley-jovian-carpo-sadr npm...
EUVD-2025-113589
Malicious code in flare-carpo-server-tethys npm...
EUVD-2025-115664
Malicious code in carpo-hermes-telesto-oauth npm...
EUVD-2025-115657
Malicious code in carpo-npm-jsonp-equinox npm...