193 matches found
MAL-2025-141251 Malicious code in cross-env-dactyl-regulus-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67417c0546de377a93c13bd911465029d14604266a506e6c88506f7c9d86cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114541
Malicious code in dependencies-fusion-prettier-cross-env npm...
EUVD-2025-112118
Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt npm...
EUVD-2025-114851
Malicious code in cross-env-init-sedna-telesto npm...
EUVD-2025-115438
Malicious code in changelog-eris-apollo-cross-env npm...
EUVD-2025-111595
Malicious code in loglevel-run-script-cross-env-superagent npm...
EUVD-2025-115742
Malicious code in canopus-lint-altair-cross-env npm...
Malicious code in cross-env-nightmare-public-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aba308c0195b2c6c00b9e83e8ad088d62e10fe41045b98ace2fcaac2f491d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-umbriel-pyxis-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in convict-cross-env-fornax-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3400ee48bb8e6820f883a6fbadd1dc8b8b946d5fc20c19fd0b0702614d2df39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121695
Malicious code in sqlite-jabbah-cross-env-postcss-loader npm...
EUVD-2025-123980
Malicious code in package-perseus-weywot-cross-env npm...
Malicious code in iota-cross-env-socketio-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122952
Malicious code in query-lint-dione-cross-env npm...
EUVD-2025-114849
Malicious code in cross-env-nightmare-public-buffer npm...
EUVD-2025-114191
Malicious code in electron-hapi-sedna-cross-env npm...
EUVD-2025-114856
Malicious code in cross-env-fornax-hugo-quito npm...
Malicious code in cosmos-helmet-grus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...