EUVD-2025-177519

Malicious code in npm-publish-cross-env-jest npm...

EUVD-2025-177507

Malicious code in nuxtjs-quasarjet-cross-env-taurus npm...

EUVD-2025-176822

Malicious code in radiant-cross-env-neutrino-local npm...

EUVD-2025-176746

Malicious code in registry-quark-barnard-cross-env npm...

EUVD-2025-177880

Malicious code in metabolomics-cross-env-antares-run-script npm...

EUVD-2025-178608

Malicious code in hapi-cross-env-subduction-mongodb npm...

EUVD-2025-179609

Malicious code in config-cross-env-nova-bunyan npm...

EUVD-2025-179505

Malicious code in cross-env-atlas-non-blocking-eslint npm...

EUVD-2025-179502

Malicious code in cross-env-cybernetics-juno-iota npm...

EUVD-2025-179500

Malicious code in cross-env-flare-hyperion-meissa npm...

EUVD-2025-179499

Malicious code in cross-env-geochemistry-global-juno npm...

EUVD-2025-179498

Malicious code in cross-env-native-centaurus-dynamo npm...

EUVD-2025-179497

Malicious code in cross-env-package-rimraf-antares npm...

EUVD-2025-179479

Malicious code in cryptography-cross-env-google-yildun npm...

EUVD-2025-180226

Malicious code in auth0-andromeda-heka-cross-env npm...

Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186385 Malicious code in cross-env-package-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b7e5135953bf968f903061df1ef7829176346806c7e274868c5ef4f82dc597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

EUVD-2025-179503

Malicious code in cross-env-cross-env-photon-superposition npm...

MAL-2025-186380 Malicious code in cross-env-cybernetics-juno-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e927b05908edd9f55a265b28a707a8243c20578740178fe8e88c376112d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...