Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120302

Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...

EUVD-2025-114843

Malicious code in cross-env-quantum-nightwatch-bunyan npm...

EUVD-2025-114842

Malicious code in cross-env-request-markdown-magellan npm...

EUVD-2025-112514

Malicious code in ini-pulsar-cross-env-quantum npm...

EUVD-2025-114840

Malicious code in cross-env-rocket-delphinus-betelgeuse npm...

EUVD-2025-115742

Malicious code in canopus-lint-altair-cross-env npm...

EUVD-2025-112976

Malicious code in halley-dotenv-safe-rehype-cross-env npm...

EUVD-2025-112440

Malicious code in install-cross-env-ultra-radiant npm...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141258 Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121221

Malicious code in toml-cross-env-private-ini npm...

EUVD-2025-116080

Malicious code in blaze-grus-cross-env-winston npm...

EUVD-2025-113054

Malicious code in grunt-cross-env-init-phenomic npm...

EUVD-2025-120943

Malicious code in unuk-sedna-cross-env-xanadu npm...

EUVD-2025-114835

Malicious code in cross-env-tailwindcss-got-corvus npm...

Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114902

Malicious code in cosmos-helmet-grus-cross-env npm...

EUVD-2025-114852

Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...

EUVD-2025-114836

Malicious code in cross-env-soap-winston-fomalhaut npm...