218 matches found
EUVD-2025-123623
Malicious code in pm2-grus-castor-hermes npm...
MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145375 Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123618
Malicious code in pm2-loopback-update-corvus npm...
EUVD-2025-123625
Malicious code in pm2-draco-pulsar-yildun npm...
EUVD-2025-120952
Malicious code in unuk-chariklo-pm2-tool npm...
EUVD-2025-124233
Malicious code in npm-pm2-prettier-eslint npm...
EUVD-2025-116266
Malicious code in axios-pm2-xenon-hercules npm...
EUVD-2025-116918
Malicious code in acamar-pm2-deimos-canopus npm...
EUVD-2025-112031
Malicious code in jwt-pm2-sirius-dione npm...
EUVD-2025-114965
Malicious code in corvus-aquarius-pm2-hyperion npm...
EUVD-2025-124085
Malicious code in ophiuchus-pm2-framework-juno npm...
Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123607
Malicious code in pm2-sync-convict-react-bootstrap npm...
EUVD-2025-116373
Malicious code in auth-protractor-jasmine-pm2 npm...
EUVD-2025-111257
Malicious code in mensa-pm2-enceladus-fork npm...
Malicious code in cygnus-pm2-husky-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phenomic-got-uninstall-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...