EUVD-2025-124640

Malicious code in nashira-karma-husky-ceres npm...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111992

Malicious code in karma-taurus-browserify-prompts npm...

EUVD-2025-123042

Malicious code in pyxis-karma-sadr-non-blocking npm...

EUVD-2025-121063

Malicious code in uglify-js-apollo-cosmos-karma npm...

EUVD-2025-120648

Malicious code in wasat-buffer-karma-library npm...

EUVD-2025-121081

Malicious code in typeorm-karma-zenobia-inquirer npm...

EUVD-2025-112006

Malicious code in karma-galaxy-proxima-bunyan npm...

MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112016

Malicious code in karma-cordelia-private-izar npm...

EUVD-2025-121489

Malicious code in tailwindcss-async-dorado-karma npm...

MAL-2025-143239 Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-request-karma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c90bb0614863aef8fa9c825f50394f601085ce72fe96a6c0d37ac4d097153fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112020

Malicious code in karma-aether-betelgeuse-webdriver-manager npm...

EUVD-2025-120583

Malicious code in webdriver-mocha-deneb-transform-karma npm...

EUVD-2025-124201

Malicious code in nuxtjs-webdriver-manager-nestjs-karma npm...

EUVD-2025-112011

Malicious code in karma-dependencies-geckodriver-sirius npm...

EUVD-2025-114362

Malicious code in dotenv-safe-dactyl-mira-karma npm...

Malicious code in wasat-buffer-karma-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab517f07a17bafd85f8d3108a9ecec9aabd164231fb17393495b08a4f786a465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116425

Malicious code in auriga-figures-karma-ursa npm...