EUVD-2025-113342

Malicious code in gacrux-hermes-mysql-meteor npm...

MAL-2025-149885 Malicious code in zephyr-ganymede-meteor-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b7e546a6bd6e50bc24188bfa46ad9548a435f3389805cd711ddd4a6937dfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122789

Malicious code in registry-rollup-vortex-meteor npm...

EUVD-2025-113974

Malicious code in equinox-spectron-less-loader-meteor npm...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-115116

Malicious code in commitlint-meteor-centauri-dione npm...

EUVD-2025-120047

Malicious code in zephyr-ganymede-meteor-prettier npm...

EUVD-2025-115076

Malicious code in config-meteor-start-pino npm...

EUVD-2025-116537

Malicious code in arcturus-bunyan-bunyan-meteor npm...

EUVD-2025-122689

Malicious code in release-it-quark-antd-meteor npm...

EUVD-2025-120364

Malicious code in wolf-xo-meteor-figures npm...

EUVD-2025-120884

Malicious code in ursa-callisto-cypress-meteor npm...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

Malicious code in carpo-subscription-meteor-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1b684d15ee19482333f05c05b48bae9abca8e7d4913b38c3f1a54225c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147255 Malicious code in remark-meteor-slides-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4bd29b5702676310ac558508cd9e3ada75cc965d0b2dc1edaa13c4b45b699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...