217 matches found
Malicious code in pm2-hyperion-mysql-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bd384abe5841ac7d284915b8d92b119b617ca2c97fed9c70af39192ed3887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111256
Malicious code in mensa-pm2-metalsmith-eslint-config npm...
EUVD-2025-123628
Malicious code in pm2-colors-pm2-betelgeuse npm...
Malicious code in radiant-equinox-pm2-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123629
Malicious code in pm2-apex-antd-axios npm...
EUVD-2025-120193
Malicious code in xml-umbra-pavo-pm2 npm...
EUVD-2025-124545
Malicious code in neptune-pm2-dynamo-dotenv-safe npm...
EUVD-2025-123631
Malicious code in pm2-airbnb-rollup-chalk npm...
MAL-2025-143304 Malicious code in hermes-castor-pm2-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142032 Malicious code in enceladus-pm2-metalsmith-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146309 Malicious code in pm2-reveal-md-event-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea958e760b4bb93d44dc8d81957905e8fd0119c466631ef84e6172b11e0b8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144859 Malicious code in mensa-pm2-metalsmith-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123616
Malicious code in pm2-pegasus-leda-xerxes npm...
MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143522 Malicious code in ignite-pm2-postcss-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8095a9cb35cc211097688e59741a37304773dc1f5130ed8ae6a8a9f8eddfcb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...