EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-123630

Malicious code in pm2-algol-flare-jekyll npm...

EUVD-2025-123613

Malicious code in pm2-registry-kronos-janus npm...

EUVD-2025-123631

Malicious code in pm2-airbnb-rollup-chalk npm...

Malicious code in inquirer-pm2-graphql-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114349

Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...

EUVD-2025-113578

Malicious code in flare-pm2-capella-webpack npm...

EUVD-2025-123606

Malicious code in pm2-wezen-jest-acamar npm...

EUVD-2025-123629

Malicious code in pm2-apex-antd-axios npm...

EUVD-2025-111598

Malicious code in loglevel-postcss-pm2-rollup npm...

EUVD-2025-112590

Malicious code in ignite-pm2-postcss-transform npm...

EUVD-2025-123608

Malicious code in pm2-sqlite-got-stop npm...

MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146309 Malicious code in pm2-reveal-md-event-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea958e760b4bb93d44dc8d81957905e8fd0119c466631ef84e6172b11e0b8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142032 Malicious code in enceladus-pm2-metalsmith-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144859 Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143304 Malicious code in hermes-castor-pm2-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...