EUVD-2025-124426

Malicious code in nightwatch-vega-pm2-magellan npm...

EUVD-2025-124597

Malicious code in nconf-pm2-betelgeuse-hugo npm...

EUVD-2025-121320

Malicious code in testcafe-webdriver-manager-pm2-radiant npm...

EUVD-2025-121167

Malicious code in transform-delphinus-umbriel-pm2 npm...

EUVD-2025-123623

Malicious code in pm2-grus-castor-hermes npm...

EUVD-2025-122908

Malicious code in radiant-equinox-pm2-restart npm...

EUVD-2025-113884

Malicious code in eslint-plugin-capella-pm2-antares npm...

Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121689

Malicious code in sqlite-pm2-meteor-antd npm...

Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114798

Malicious code in css-loader-pm2-meissa-gravity npm...

EUVD-2025-121527

Malicious code in supervisor-pm2-phoebe-jsonp npm...

EUVD-2025-124657

Malicious code in mysql-pm2-ceres-shelljs npm...

EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-120532

Malicious code in webpack-ganymede-pm2-sails npm...

EUVD-2025-121952

Malicious code in sirius-resolvers-pm2-halley npm...

EUVD-2025-123625

Malicious code in pm2-draco-pulsar-yildun npm...

EUVD-2025-123619

Malicious code in pm2-loop-izar-zenobia npm...

EUVD-2025-124159

Malicious code in octans-axios-node-sass-pm2 npm...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...