EUVD-2025-113489

Malicious code in fornax-gulp-cross-env-miranda npm...

Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111595

Malicious code in loglevel-run-script-cross-env-superagent npm...

EUVD-2025-114850

Malicious code in cross-env-mongoose-juno-sequelize npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

EUVD-2025-114831

Malicious code in cross-env-zenith-dotenv-safe-cypress npm...

EUVD-2025-112396

Malicious code in iota-cross-env-socketio-child-process npm...

Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121908

Malicious code in soap-cross-env-norma-subscription npm...

EUVD-2025-114057

Malicious code in enif-meteor-protractor-cross-env npm...

EUVD-2025-114842

Malicious code in cross-env-request-markdown-magellan npm...

EUVD-2025-112698

Malicious code in husky-cross-env-miranda-eclipse npm...

EUVD-2025-114849

Malicious code in cross-env-nightmare-public-buffer npm...

EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

MAL-2025-141265 Malicious code in cross-env-prompts-equinox-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705e7db14495cadbb89c51f3f8daee6b48ff5007a23ac673f16535a49b7849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120943

Malicious code in unuk-sedna-cross-env-xanadu npm...

MAL-2025-141273 Malicious code in cross-env-soap-winston-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...