EUVD-2025-111368

Malicious code in materialize-meteor-frontend-centaurus npm...

Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113342

Malicious code in gacrux-hermes-mysql-meteor npm...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-112690

Malicious code in husky-meteor-gemini-sirius npm...

EUVD-2025-121330

Malicious code in testcafe-kinetic-meteor-arcturus npm...

EUVD-2025-113464

Malicious code in fornax-quark-meteor-ursa npm...

EUVD-2025-122746

Malicious code in rehype-meteor-pegasus-transform npm...

Malicious code in meteor-config-csv-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f85e5bc2c4f2c2668a1ada2fef47ed7c28b32fffaa259ed1920654dd56ad43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115076

Malicious code in config-meteor-start-pino npm...

EUVD-2025-120824

Malicious code in venus-centaurus-meteor-orbit npm...

Malicious code in hercules-meteor-sync-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f1c40a1e572a21b09edc363496e9529bef3811850b83d40f0e9b07ca9d5be10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123317

Malicious code in procyon-meteor-chai-xenon npm...

EUVD-2025-124692

Malicious code in mutation-meteor-magellan-deneb npm...

EUVD-2025-113296

Malicious code in ganymede-procyon-phoebe-meteor npm...

EUVD-2025-123522

Malicious code in postcss-loader-meteor-mocha-phoenix npm...

MAL-2025-144912 Malicious code in meteor-google-jekyll-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566a64039428cf1418221a4fac71c67096ccd2cc5667551d058f7fe3f6978c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146224 Malicious code in pino-meteor-mdx-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23a752b5d5e0c701724a1e23f7e6cdf1609eb8fa82395f246c495bffbe4b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146644 Malicious code in promise-meteor-dotenv-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709454d142f7f534a5d50fd7d991e4274f59e8f69dc2746d85e4ff3417912ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...