1193 matches found
EUVD-2025-114852
Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...
Malicious code in cross-env-tailwindcss-got-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121909
Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...
EUVD-2025-121221
Malicious code in toml-cross-env-private-ini npm...
EUVD-2025-114856
Malicious code in cross-env-fornax-hugo-quito npm...
MAL-2025-141251 Malicious code in cross-env-dactyl-regulus-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67417c0546de377a93c13bd911465029d14604266a506e6c88506f7c9d86cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123708
Malicious code in pino-cross-env-jasmine-json npm...
EUVD-2025-114833
Malicious code in cross-env-yakutsk-octans-graphql npm...
MAL-2025-141267 Malicious code in cross-env-request-markdown-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac399a914c58ef29195046b374c25f58ed3f7b5a0f5be57f42cc767e194bd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-cross-env-promise-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116080
Malicious code in blaze-grus-cross-env-winston npm...
EUVD-2025-114853
Malicious code in cross-env-gemini-oauth-weywot npm...
MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112514
Malicious code in ini-pulsar-cross-env-quantum npm...