EUVD-2025-123316

Malicious code in procyon-mongoose-meteor-castor npm...

EUVD-2025-123637

Malicious code in playwright-meteor-loglevel-enif npm...

EUVD-2025-123317

Malicious code in procyon-meteor-chai-xenon npm...

EUVD-2025-115760

Malicious code in callisto-public-hyperion-meteor npm...

EUVD-2025-113110

Malicious code in graphql-enceladus-meteor-jasmine npm...

Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122178

Malicious code in scripts-quantum-andromeda-meteor npm...

EUVD-2025-114317

Malicious code in draco-eridanus-meteor-forever npm...

EUVD-2025-116288

Malicious code in await-wezen-nconf-meteor npm...

EUVD-2025-115191

Malicious code in command-ophiuchus-envconfig-meteor npm...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

EUVD-2025-120113

Malicious code in yildun-postcss-meteor-unuk npm...

EUVD-2025-111213

Malicious code in meteor-chalk-csrf-sagitta npm...

EUVD-2025-111215

Malicious code in meteor-bootstrap-impulse-flare npm...

EUVD-2025-115007

Malicious code in cordelia-meteor-figures-ursa npm...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123697

Malicious code in pino-meteor-mdx-despina npm...

EUVD-2025-124249

Malicious code in npm-algol-barnard-meteor npm...

EUVD-2025-113464

Malicious code in fornax-quark-meteor-ursa npm...

Malicious code in resolvers-meteor-nodemon-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0936c12248fcd3921a0aacc79011e7a024186908318bf5dc11c50e41e415e551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...