713 matches found
MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140448 Malicious code in carpo-meteor-nconf-uninstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113116
Malicious code in graphql-cache-dactyl-meteor npm...
Malicious code in yildun-postcss-meteor-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116584
Malicious code in apollo-jest-titan-meteor npm...
MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149885 Malicious code in zephyr-ganymede-meteor-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b7e546a6bd6e50bc24188bfa46ad9548a435f3389805cd711ddd4a6937dfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144912 Malicious code in meteor-google-jekyll-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566a64039428cf1418221a4fac71c67096ccd2cc5667551d058f7fe3f6978c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111191
Malicious code in meteor-postcss-galaxy-markdown npm...
MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142966 Malicious code in google-mensa-meteor-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f170210e0d8eb08a7942ac60c145b1e1e5c1422ede04ad794da31b30e14df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113482
Malicious code in fornax-link-framework-meteor npm...
Malicious code in terser-meteor-element-ui-callisto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carpo-subscription-meteor-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e1b684d15ee19482333f05c05b48bae9abca8e7d4913b38c3f1a54225c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144942 Malicious code in meteor-writable-jekyll-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d15e37318d6f6855e5bf85bc9629140d104803933033f155454a427da1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...