248 matches found
MAL-2025-145719 Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396e04392f9a76bac22dee614f1bfcbcd3cbf55bd09109b9d581980e115ba151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140430 Malicious code in carpo-async-ganymede-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30455e0f409485a1dc7ed4659e0f3c508d3a48c6b811106230b3a148fbc8881d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140438 Malicious code in carpo-docusaurus-run-script-aldebaran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0005827d3b1e3675599308fd06a392bc52127f29e3a5222522c49438e4e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140449 Malicious code in carpo-mira-restart-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1338397dbe4e92f39d3c40c186591ae1ad77a9bfd7a198bac2c4fd27af7e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144448 Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rimraf-carpo-eleventy-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112531
Malicious code in ini-carpo-async-unuk npm...
EUVD-2025-115673
Malicious code in carpo-bunyan-server-electron-builder npm...
EUVD-2025-122476
Malicious code in rimraf-carpo-eleventy-supervisor npm...
EUVD-2025-115652
Malicious code in carpo-typeorm-playwright-rimraf npm...
EUVD-2025-111767
Malicious code in less-socketio-loglevel-carpo npm...
EUVD-2025-115655
Malicious code in carpo-semantic-release-kaus-jovian npm...
EUVD-2025-115656
Malicious code in carpo-prettier-stylelint-cassini-capella npm...
EUVD-2025-115212
Malicious code in command-astro-carpo-webdriverio npm...
EUVD-2025-113412
Malicious code in frontend-carpo-yaml-hyperion npm...
EUVD-2025-122425
Malicious code in rollup-gatsby-carpo-json npm...
EUVD-2025-115746
Malicious code in canopus-ini-carpo-standard npm...
Malicious code in spica-carpo-event-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c2b56519d783da3ccc64e57653e3880074db5bec7a185adf0c14cde83acb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...