193 matches found
EUVD-2025-113054
Malicious code in grunt-cross-env-init-phenomic npm...
EUVD-2025-116080
Malicious code in blaze-grus-cross-env-winston npm...
EUVD-2025-121508
Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...
EUVD-2025-111111
Malicious code in mira-cache-cross-env-babel npm...
EUVD-2025-112213
Malicious code in jekyll-dagda-google-cross-env npm...
EUVD-2025-111796
Malicious code in less-loader-cross-env-nebula-ceres npm...
EUVD-2025-112286
Malicious code in janus-prettier-stylelint-cross-env-server npm...
EUVD-2025-114843
Malicious code in cross-env-quantum-nightwatch-bunyan npm...
EUVD-2025-121221
Malicious code in toml-cross-env-private-ini npm...
EUVD-2025-114842
Malicious code in cross-env-request-markdown-magellan npm...
EUVD-2025-114857
Malicious code in cross-env-despina-uglify-js-terser npm...
EUVD-2025-114858
Malicious code in cross-env-dactyl-regulus-ini npm...
EUVD-2025-112698
Malicious code in husky-cross-env-miranda-eclipse npm...
MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112514
Malicious code in ini-pulsar-cross-env-quantum npm...
Malicious code in test-cross-env-json-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2776897fa85ee4c9d70fe5522af98d5ad8fee59c900ca63216b4324d8f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...