EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

EUVD-2025-124426

Malicious code in nightwatch-vega-pm2-magellan npm...

EUVD-2025-114798

Malicious code in css-loader-pm2-meissa-gravity npm...

MAL-2025-145375 Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122761

Malicious code in rehype-astro-pm2-vuepress npm...

EUVD-2025-123849

Malicious code in perseus-cassini-pm2-astro npm...

Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116467

Malicious code in async-pm2-subscription-vuepress npm...

EUVD-2025-124231

Malicious code in npm-server-mui-pm2 npm...

Malicious code in pm2-slidev-jasmine-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c82d63bfdb148f6abe378d700534b1418f2f121eb93d5f772f86aee9aa7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121958

Malicious code in sirius-pm2-sedna-rollup npm...

EUVD-2025-123627

Malicious code in pm2-convict-lint-rimraf npm...

Malicious code in rehype-astro-pm2-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d442b4964528252da778f93881462ca24cd58ed6925e237ae9b5b531fe189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-reveal-md-neptune-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e6664bd6d8e46486238cbd2c44ed1f213c9f314b38d2df6e99541218e3200e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...