Malicious code in wezen-mira-pm2-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48dfb675efc87f46b8c1732d0a186062453d40de5752664af00e8082b7ca5d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116467

Malicious code in async-pm2-subscription-vuepress npm...

EUVD-2025-116266

Malicious code in axios-pm2-xenon-hercules npm...

Malicious code in corvus-aquarius-pm2-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ff7207b8b657c40f4d23ffd67072171e865286ce3c9982e9edb02ab468b3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123630

Malicious code in pm2-algol-flare-jekyll npm...

EUVD-2025-111256

Malicious code in mensa-pm2-metalsmith-eslint-config npm...

EUVD-2025-112441

Malicious code in install-config-hydra-pm2 npm...

Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124753

Malicious code in mongoose-sirius-bellatrix-pm2 npm...

EUVD-2025-123618

Malicious code in pm2-loopback-update-corvus npm...

MAL-2025-146309 Malicious code in pm2-reveal-md-event-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea958e760b4bb93d44dc8d81957905e8fd0119c466631ef84e6172b11e0b8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113578

Malicious code in flare-pm2-capella-webpack npm...

EUVD-2025-123606

Malicious code in pm2-wezen-jest-acamar npm...

EUVD-2025-123849

Malicious code in perseus-cassini-pm2-astro npm...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124085

Malicious code in ophiuchus-pm2-framework-juno npm...

EUVD-2025-124159

Malicious code in octans-axios-node-sass-pm2 npm...