MAL-2025-147176 Malicious code in rehype-meteor-pegasus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fa9c9bc7d00cb76bf4363eeb00bf670efaa50798ea6e6eb8f5a516d613d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144905 Malicious code in meteor-corvus-heka-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479cdad0f54173ac42f22e183a69a52bf1784726c75ba6dc76eb8c6b38dab700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144942 Malicious code in meteor-writable-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147255 Malicious code in remark-meteor-slides-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4bd29b5702676310ac558508cd9e3ada75cc965d0b2dc1edaa13c4b45b699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111173

Malicious code in meteor-writable-jekyll-io npm...

EUVD-2025-111178

Malicious code in meteor-spectron-remark-xanthus npm...

EUVD-2025-111188

Malicious code in meteor-quark-scorpius-framework npm...

EUVD-2025-111189

Malicious code in meteor-pulsar-prompts-test npm...

EUVD-2025-121653

Malicious code in start-izar-meteor-antares npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-121398

Malicious code in terser-meteor-element-ui-callisto npm...

MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144934 Malicious code in meteor-sedna-markdownlint-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24b23272bb9a9b6fe57ada512032b74918ee0417d5834f858230c532e1bc667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149567 Malicious code in wolf-xo-meteor-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412da3d5b464f3ed5815a795d7eb08b586d9b4fc392cd09d79ea6cd8f12ec3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114760

Malicious code in csv-neptune-fetch-meteor npm...

MAL-2025-149614 Malicious code in xanadu-virgo-meteor-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c761f603fa14ef1f4f2c2a192cb03b28359feca4a70d4e702e1fadd8d0c5e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149885 Malicious code in zephyr-ganymede-meteor-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b7e546a6bd6e50bc24188bfa46ad9548a435f3389805cd711ddd4a6937dfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...