Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111199

Malicious code in meteor-iota-xanadu-babel npm...

EUVD-2025-120590

Malicious code in webdriver-manager-yakutsk-meteor-sync npm...

Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111198

Malicious code in meteor-janus-await-airbnb npm...

EUVD-2025-111180

Malicious code in meteor-semantic-release-inquirer-pegasus npm...

Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-webpack-europa-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee921d1f9831f91035c7dbe2911c648fcdf6acf240c53f48a9d2d4cd082facbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-meteor-janus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30aa8dca7c23cd91131b2af07c20f5cae9f654a59942866534f511891b7722d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111204

Malicious code in meteor-global-xo-sequelize npm...

EUVD-2025-114923

Malicious code in cosmiconfig-meteor-draco-antares npm...

EUVD-2025-116053

Malicious code in blitz-leda-meteor-spawn npm...

EUVD-2025-120113

Malicious code in yildun-postcss-meteor-unuk npm...

EUVD-2025-111368

Malicious code in materialize-meteor-frontend-centaurus npm...

Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113342

Malicious code in gacrux-hermes-mysql-meteor npm...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-112690

Malicious code in husky-meteor-gemini-sirius npm...

EUVD-2025-121330

Malicious code in testcafe-kinetic-meteor-arcturus npm...

EUVD-2025-122746

Malicious code in rehype-meteor-pegasus-transform npm...