Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-australis-filament-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d038323a86465eb976d3950a5e25d222716df1de1bed41c119a8f11b7642f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178574

Malicious code in heka-puppeteer-phoebe-meteor npm...

EUVD-2025-175491

Malicious code in xerxes-koa-promise-meteor npm...

EUVD-2025-177419

Malicious code in orbit-cosmicweb-meteor-wolf npm...

MAL-2025-188240 Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188015 Malicious code in meteor-cache-fomalhaut-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0462fe49c99304144ad4d9f3b517e441c06daad585939395d80b64f71ac5e537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177863

Malicious code in meteor-cosmochemistry-parsec-wezen npm...

MAL-2025-188033 Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7825fb698098acfc9237bd9d71a9037ffc59b30a8a2d44a9f74468e7506bfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175544

Malicious code in winston-html-webpack-plugin-hologram-meteor npm...

EUVD-2025-177151

Malicious code in pipe-pino-pretty-toml-meteor npm...

EUVD-2025-177859

Malicious code in meteor-fermiparadox-pino-mysql npm...

EUVD-2025-175797

Malicious code in update-meteor-jupiter-kaus npm...

EUVD-2025-177849

Malicious code in meteor-spectron-webdriver-ignite-spawn npm...

EUVD-2025-175732

Malicious code in version-meteor-jupiter-chariklo npm...

EUVD-2025-175576

Malicious code in weywot-less-meteor-jupiter npm...

EUVD-2025-179042

Malicious code in eslint-loop-meteor-jasmine npm...

EUVD-2025-177867

Malicious code in meteor-cache-fomalhaut-winston npm...

EUVD-2025-179641

Malicious code in commitizen-markdown-luminescence-meteor npm...

Malicious code in hermes-websockets-arcturus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36606ac1ad475e7549406f6d7bf78dea41167443315514434ec7399172a4d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...