EUVD-2025-123609

Malicious code in pm2-slidev-jasmine-regulus npm...

EUVD-2025-120467

Malicious code in wezen-mira-pm2-fusion npm...

Malicious code in rehype-astro-pm2-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d442b4964528252da778f93881462ca24cd58ed6925e237ae9b5b531fe189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-slidev-jasmine-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c82d63bfdb148f6abe378d700534b1418f2f121eb93d5f772f86aee9aa7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112694

Malicious code in husky-ganymede-pm2-react-bootstrap npm...

EUVD-2025-112917

Malicious code in hapi-pm2-event-element-ui npm...

EUVD-2025-113084

Malicious code in gravity-pm2-cosmiconfig-cli npm...

EUVD-2025-116467

Malicious code in async-pm2-subscription-vuepress npm...

EUVD-2025-122761

Malicious code in rehype-astro-pm2-vuepress npm...

EUVD-2025-124231

Malicious code in npm-server-mui-pm2 npm...

EUVD-2025-123849

Malicious code in perseus-cassini-pm2-astro npm...

EUVD-2025-111819

Malicious code in leda-sequelize-pm2-sagitta npm...

Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123621

Malicious code in pm2-helios-alphard-farout npm...

Malicious code in wezen-mira-pm2-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48dfb675efc87f46b8c1732d0a186062453d40de5752664af00e8082b7ca5d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112657

Malicious code in hydra-sails-jekyll-pm2 npm...

Malicious code in pm2-reveal-md-neptune-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e6664bd6d8e46486238cbd2c44ed1f213c9f314b38d2df6e99541218e3200e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-pm2-event-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...