MAL-2025-186384 Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190067 Malicious code in unuk-hapi-cross-env-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d337623dc4dce49e5bb465b6ab727eee58fb69714217f60caaed1fcd72d1c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179497

Malicious code in cross-env-package-rimraf-antares npm...

EUVD-2025-179479

Malicious code in cryptography-cross-env-google-yildun npm...

EUVD-2025-180226

Malicious code in auth0-andromeda-heka-cross-env npm...

EUVD-2025-178608

Malicious code in hapi-cross-env-subduction-mongodb npm...

EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

Malicious code in cross-env-cross-env-photon-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb2fb8727e1f7724d5accad4dc8d450ac3e5735b535600cb2fee7ed81e14ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179505

Malicious code in cross-env-atlas-non-blocking-eslint npm...

Malicious code in cross-env-cybernetics-juno-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175808

Malicious code in unuk-hapi-cross-env-nashira npm...

EUVD-2025-177577

Malicious code in node-config-cross-env-event-fomalhaut npm...

EUVD-2025-176746

Malicious code in registry-quark-barnard-cross-env npm...

EUVD-2025-179609

Malicious code in config-cross-env-nova-bunyan npm...

EUVD-2025-179503

Malicious code in cross-env-cross-env-photon-superposition npm...

EUVD-2025-179504

Malicious code in cross-env-atlas-thuban-enif npm...

EUVD-2025-179499

Malicious code in cross-env-geochemistry-global-juno npm...

EUVD-2025-179500

Malicious code in cross-env-flare-hyperion-meissa npm...

Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-flare-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080b8e739095288c5b6591e7120a4df20933d6f957db23a93c573d43fdfca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...