EUVD-2025-120363

Malicious code in wolf-yaml-morgan-cross-env npm...

EUVD-2025-114834

Malicious code in cross-env-umbriel-pyxis-nashira npm...

Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112334

Malicious code in jabbah-gulp-cross-env-magellan npm...

Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114844

Malicious code in cross-env-prompts-equinox-mdx npm...

EUVD-2025-121360

Malicious code in test-cross-env-json-iota npm...

EUVD-2025-114852

Malicious code in cross-env-hydra-vega-terser-webpack-plugin npm...

EUVD-2025-116080

Malicious code in blaze-grus-cross-env-winston npm...

EUVD-2025-121695

Malicious code in sqlite-jabbah-cross-env-postcss-loader npm...

Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111609

Malicious code in loglevel-cross-env-exec-update npm...

EUVD-2025-120944

Malicious code in unuk-schema-cross-env-browserify npm...

EUVD-2025-114833

Malicious code in cross-env-yakutsk-octans-graphql npm...

EUVD-2025-123148

Malicious code in publish-apex-sqlite-cross-env npm...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...