MAL-2025-141273 Malicious code in cross-env-soap-winston-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cross-env-json-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2776897fa85ee4c9d70fe5522af98d5ad8fee59c900ca63216b4324d8f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141070 Malicious code in convict-cross-env-fornax-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3400ee48bb8e6820f883a6fbadd1dc8b8b946d5fc20c19fd0b0702614d2df39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113489

Malicious code in fornax-gulp-cross-env-miranda npm...

EUVD-2025-112213

Malicious code in jekyll-dagda-google-cross-env npm...

EUVD-2025-114855

Malicious code in cross-env-ganymede-leda-markdown-pdf npm...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120628

Malicious code in wasat-sadr-iota-cross-env npm...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141267 Malicious code in cross-env-request-markdown-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac399a914c58ef29195046b374c25f58ed3f7b5a0f5be57f42cc767e194bd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141265 Malicious code in cross-env-prompts-equinox-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705e7db14495cadbb89c51f3f8daee6b48ff5007a23ac673f16535a49b7849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141258 Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-fomalhaut-morgan-cross-env (npm)

The package convict-fomalhaut-morgan-cross-env was found to contain malicious code...

Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)

The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...

Malicious code in elektra-cross-env-deimos-ganymede (npm)

The package elektra-cross-env-deimos-ganymede was found to contain malicious code...