189 matches found
EUVD-2025-114853
Malicious code in cross-env-gemini-oauth-weywot npm...
Malicious code in cosmos-helmet-grus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116061
Malicious code in blitz-cross-env-ini-electron-builder npm...
Malicious code in cross-env-quantum-nightwatch-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12400d186977ff15ca3a5e7de847d69c1d3ca300dc0003efd52850bc6ce3c45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113842
Malicious code in europa-fusion-cross-env-electron-builder npm...
EUVD-2025-112213
Malicious code in jekyll-dagda-google-cross-env npm...
EUVD-2025-123980
Malicious code in package-perseus-weywot-cross-env npm...
EUVD-2025-121508
Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...
EUVD-2025-115438
Malicious code in changelog-eris-apollo-cross-env npm...
EUVD-2025-114857
Malicious code in cross-env-despina-uglify-js-terser npm...
EUVD-2025-114845
Malicious code in cross-env-pegasus-async-ganymede npm...
Malicious code in development-solis-cross-env-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dcccf011de4fd5407fba424c68a7b956c9e40e3be6c84753b18110b9fc5f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wolf-cross-env-markdown-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-umbriel-pyxis-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114851
Malicious code in cross-env-init-sedna-telesto npm...
EUVD-2025-120386
Malicious code in wolf-cross-env-markdown-postcss-loader npm...
EUVD-2025-120363
Malicious code in wolf-yaml-morgan-cross-env npm...
MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141070 Malicious code in convict-cross-env-fornax-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3400ee48bb8e6820f883a6fbadd1dc8b8b946d5fc20c19fd0b0702614d2df39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...