EUVD-2025-112396

Malicious code in iota-cross-env-socketio-child-process npm...

EUVD-2025-112976

Malicious code in halley-dotenv-safe-rehype-cross-env npm...

EUVD-2025-113054

Malicious code in grunt-cross-env-init-phenomic npm...

EUVD-2025-114831

Malicious code in cross-env-zenith-dotenv-safe-cypress npm...

EUVD-2025-114849

Malicious code in cross-env-nightmare-public-buffer npm...

EUVD-2025-114843

Malicious code in cross-env-quantum-nightwatch-bunyan npm...

EUVD-2025-113842

Malicious code in europa-fusion-cross-env-electron-builder npm...

EUVD-2025-114851

Malicious code in cross-env-init-sedna-telesto npm...

EUVD-2025-121908

Malicious code in soap-cross-env-norma-subscription npm...

EUVD-2025-116020

Malicious code in bootes-iota-sagitta-cross-env npm...

EUVD-2025-114902

Malicious code in cosmos-helmet-grus-cross-env npm...

EUVD-2025-115438

Malicious code in changelog-eris-apollo-cross-env npm...

EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

EUVD-2025-120302

Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...

Malicious code in pino-cross-env-jasmine-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec70413487935d3604fad3ffe3220304ef0fe67e010a5e0e0bb3f32e2fa28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141265 Malicious code in cross-env-prompts-equinox-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705e7db14495cadbb89c51f3f8daee6b48ff5007a23ac673f16535a49b7849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141273 Malicious code in cross-env-soap-winston-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c093cbd1ca03d9684a17411c5b102b2d7045783909788e47ba39b5fbfcccb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...