MAL-2025-186380 Malicious code in cross-env-cybernetics-juno-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114834

Malicious code in cross-env-umbriel-pyxis-nashira npm...

EUVD-2025-112334

Malicious code in jabbah-gulp-cross-env-magellan npm...

EUVD-2025-120363

Malicious code in wolf-yaml-morgan-cross-env npm...

EUVD-2025-111796

Malicious code in less-loader-cross-env-nebula-ceres npm...

EUVD-2025-114853

Malicious code in cross-env-gemini-oauth-weywot npm...

EUVD-2025-123708

Malicious code in pino-cross-env-jasmine-json npm...

EUVD-2025-120944

Malicious code in unuk-schema-cross-env-browserify npm...

Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116731

Malicious code in altair-umbriel-child-process-cross-env npm...

Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

Malicious code in unuk-sedna-cross-env-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46ecc9ad12a0b9cd7f2d3eb400ba8eea4dd4bf8faeac232d404afb24f07801d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115742

Malicious code in canopus-lint-altair-cross-env npm...

EUVD-2025-123148

Malicious code in publish-apex-sqlite-cross-env npm...

EUVD-2025-114856

Malicious code in cross-env-fornax-hugo-quito npm...

EUVD-2025-114852

Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...

Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114844

Malicious code in cross-env-prompts-equinox-mdx npm...

Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...