1017 matches found
MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124128
Malicious code in odin-cross-env-prettier-plugin-markdown-deimos npm...
EUVD-2025-111111
Malicious code in mira-cache-cross-env-babel npm...
EUVD-2025-121908
Malicious code in soap-cross-env-norma-subscription npm...
EUVD-2025-114849
Malicious code in cross-env-nightmare-public-buffer npm...
EUVD-2025-122378
Malicious code in run-script-got-cross-env-yaml npm...
EUVD-2025-114842
Malicious code in cross-env-request-markdown-magellan npm...
EUVD-2025-112514
Malicious code in ini-pulsar-cross-env-quantum npm...
EUVD-2025-120386
Malicious code in wolf-cross-env-markdown-postcss-loader npm...
EUVD-2025-112976
Malicious code in halley-dotenv-safe-rehype-cross-env npm...
Malicious code in cross-env-init-sedna-telesto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113054
Malicious code in grunt-cross-env-init-phenomic npm...
EUVD-2025-120943
Malicious code in unuk-sedna-cross-env-xanadu npm...
Malicious code in pino-cross-env-jasmine-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec70413487935d3604fad3ffe3220304ef0fe67e010a5e0e0bb3f32e2fa28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114846
Malicious code in cross-env-parcel-forever-perseus npm...
EUVD-2025-113489
Malicious code in fornax-gulp-cross-env-miranda npm...
EUVD-2025-114851
Malicious code in cross-env-init-sedna-telesto npm...