EUVD-2025-177987

Malicious code in lyra-xanthus-csrf-pm2 npm...

EUVD-2025-179522

Malicious code in cosmos-framework-gacrux-pm2 npm...

EUVD-2025-176225

Malicious code in standard-saturnology-webpack-pm2 npm...

EUVD-2025-179560

Malicious code in corvus-biohacking-helmet-pm2 npm...

EUVD-2025-178613

Malicious code in halley-pm2-semantic-ui-commitlint-config-angular npm...

EUVD-2025-179972

Malicious code in brane-pm2-isostasy-jekyll npm...

Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190405 Malicious code in xo-helios-child-process-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6abf116ef5bd6a77aedf9bcc2b5428a4945e26fbf2e8c0d79a0fccebb457771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186322 Malicious code in corvus-biohacking-helmet-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7742a784bbf8e25aef209fb9ada0b1ed98d13ae9a49bfeabd7dd63c78da91c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113884

Malicious code in eslint-plugin-capella-pm2-antares npm...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123623

Malicious code in pm2-grus-castor-hermes npm...

EUVD-2025-124159

Malicious code in octans-axios-node-sass-pm2 npm...

EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-113689

Malicious code in farout-pm2-magellan-standard npm...

EUVD-2025-121952

Malicious code in sirius-resolvers-pm2-halley npm...

EUVD-2025-121167

Malicious code in transform-delphinus-umbriel-pm2 npm...

Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-aquarius-pm2-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ff7207b8b657c40f4d23ffd67072171e865286ce3c9982e9edb02ab468b3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...