218 matches found
MAL-2025-143195 Malicious code in hapi-pm2-event-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124233
Malicious code in npm-pm2-prettier-eslint npm...
EUVD-2025-112441
Malicious code in install-config-hydra-pm2 npm...
EUVD-2025-112031
Malicious code in jwt-pm2-sirius-dione npm...
Malicious code in flare-pm2-capella-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115496
Malicious code in chakra-ui-cypress-juno-pm2 npm...
Malicious code in pm2-xerxes-luna-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121958
Malicious code in sirius-pm2-sedna-rollup npm...
MAL-2025-143455 Malicious code in hydra-sails-jekyll-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145609 Malicious code in non-blocking-halley-pm2-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550f4c21432c547db7803570839488aad6e6d7d907e29bf2f2bca16cbeed09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123622
Malicious code in pm2-halley-vega-eclipse npm...
EUVD-2025-120952
Malicious code in unuk-chariklo-pm2-tool npm...
MAL-2025-143028 Malicious code in gravity-pm2-cosmiconfig-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146290 Malicious code in pm2-airbnb-rollup-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00812a5a5bb55e9fbd4f7ff184dd941873e86494f26b6a910d99427900e51523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146294 Malicious code in pm2-convict-lint-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3599bc1a7467d1187d95c87d1bf5167564ec62aaf91e11c17980fd31d2f03c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144273 Malicious code in leda-hydra-pm2-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d56e20b55b72b350fc2e6d9234e19db1c5dd0f9a3428ab870886fa15a9efa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...