Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121689

Malicious code in sqlite-pm2-meteor-antd npm...

EUVD-2025-112459

Malicious code in inquirer-pm2-graphql-miranda npm...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124159

Malicious code in octans-axios-node-sass-pm2 npm...

Malicious code in hermes-castor-pm2-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124597

Malicious code in nconf-pm2-betelgeuse-hugo npm...

EUVD-2025-124657

Malicious code in mysql-pm2-ceres-shelljs npm...

EUVD-2025-121527

Malicious code in supervisor-pm2-phoebe-jsonp npm...

Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123619

Malicious code in pm2-loop-izar-zenobia npm...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114733

Malicious code in cygnus-pm2-husky-loglevel npm...

Malicious code in cygnus-pino-pretty-pm2-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb5eb2f0b3372ea6bc8e5aba8a9ad3a334a244fd1f0d9dc4913ee53f3e7fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120532

Malicious code in webpack-ganymede-pm2-sails npm...

Malicious code in corvus-aquarius-pm2-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ff7207b8b657c40f4d23ffd67072171e865286ce3c9982e9edb02ab468b3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-vega-pm2-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9721711530d3774701e2dbb09bc46c5e32016b8e64cfb20ad8261d43bf4fa1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124441

Malicious code in nightwatch-pm2-vega-ceres npm...

EUVD-2025-121952

Malicious code in sirius-resolvers-pm2-halley npm...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...