EUVD-2025-114850

Malicious code in cross-env-mongoose-juno-sequelize npm...

EUVD-2025-123980

Malicious code in package-perseus-weywot-cross-env npm...

EUVD-2025-115438

Malicious code in changelog-eris-apollo-cross-env npm...

Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114843

Malicious code in cross-env-quantum-nightwatch-bunyan npm...

EUVD-2025-114831

Malicious code in cross-env-zenith-dotenv-safe-cypress npm...

Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113842

Malicious code in europa-fusion-cross-env-electron-builder npm...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

EUVD-2025-112698

Malicious code in husky-cross-env-miranda-eclipse npm...

EUVD-2025-116020

Malicious code in bootes-iota-sagitta-cross-env npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-120302

Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...

Malicious code in cross-env-fornax-hugo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114057

Malicious code in enif-meteor-protractor-cross-env npm...

EUVD-2025-112396

Malicious code in iota-cross-env-socketio-child-process npm...

EUVD-2025-111595

Malicious code in loglevel-run-script-cross-env-superagent npm...

Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...