EUVD-2025-115116

Malicious code in commitlint-meteor-centauri-dione npm...

EUVD-2025-116810

Malicious code in algol-chai-babel-meteor npm...

EUVD-2025-111172

Malicious code in meteor-xml-equinox-mini-css-extract-plugin npm...

EUVD-2025-113268

Malicious code in gatsby-geckodriver-registry-meteor npm...

EUVD-2025-113116

Malicious code in graphql-cache-dactyl-meteor npm...

EUVD-2025-111216

Malicious code in meteor-apollo-xanadu-kinetic npm...

EUVD-2025-122668

Malicious code in remark-meteor-slides-kaus npm...

EUVD-2025-111191

Malicious code in meteor-postcss-galaxy-markdown npm...

EUVD-2025-122849

Malicious code in react-bootstrap-rocket-async-meteor npm...

EUVD-2025-116537

Malicious code in arcturus-bunyan-bunyan-meteor npm...

Malicious code in remark-meteor-leda-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba70179fa671020e8e1ec091d1f17418204aa9da3170160559b1468c152ee42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111185

Malicious code in meteor-registry-html-webpack-plugin-gravity npm...

EUVD-2025-116274

Malicious code in axios-exec-umbriel-meteor npm...

Malicious code in yildun-postcss-meteor-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111204

Malicious code in meteor-global-xo-sequelize npm...

Malicious code in bootes-request-meteor-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74d0fc73bb54021a4f5141e63b670b81c2ccda4934aae6ce89637143d45c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114255

Malicious code in eclipse-meteor-stop-antares npm...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...