Malicious code in carpo-subscription-meteor-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1b684d15ee19482333f05c05b48bae9abca8e7d4913b38c3f1a54225c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115654

Malicious code in carpo-subscription-meteor-bootstrap npm...

EUVD-2025-111215

Malicious code in meteor-bootstrap-impulse-flare npm...