EUVD-2025-121689

Malicious code in sqlite-pm2-meteor-antd npm...

MAL-2025-142648 Malicious code in fornax-quark-meteor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bdf86a84f5036729f986f0bb084f669d9198a4e0f0560315f8725e29489476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111189

Malicious code in meteor-pulsar-prompts-test npm...

MAL-2025-147254 Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143235 Malicious code in helios-impulse-meteor-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144913 Malicious code in meteor-html-webpack-plugin-mui-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ba44be2ccd673c3f19ceb7a542f761f31250400b8f3caa7ffa5327a7e58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148272 Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146644 Malicious code in promise-meteor-dotenv-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709454d142f7f534a5d50fd7d991e4274f59e8f69dc2746d85e4ff3417912ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144904 Malicious code in meteor-config-csv-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f85e5bc2c4f2c2668a1ada2fef47ed7c28b32fffaa259ed1920654dd56ad43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113268

Malicious code in gatsby-geckodriver-registry-meteor npm...

Malicious code in bootes-request-meteor-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74d0fc73bb54021a4f5141e63b670b81c2ccda4934aae6ce89637143d45c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-122789

Malicious code in registry-rollup-vortex-meteor npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...

Malicious code in yildun-postcss-meteor-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...