EUVD-2025-177519

Malicious code in npm-publish-cross-env-jest npm...

EUVD-2025-177507

Malicious code in nuxtjs-quasarjet-cross-env-taurus npm...

EUVD-2025-176822

Malicious code in radiant-cross-env-neutrino-local npm...

EUVD-2025-176746

Malicious code in registry-quark-barnard-cross-env npm...

EUVD-2025-177880

Malicious code in metabolomics-cross-env-antares-run-script npm...

EUVD-2025-178608

Malicious code in hapi-cross-env-subduction-mongodb npm...

EUVD-2025-179609

Malicious code in config-cross-env-nova-bunyan npm...

EUVD-2025-179505

Malicious code in cross-env-atlas-non-blocking-eslint npm...

EUVD-2025-179502

Malicious code in cross-env-cybernetics-juno-iota npm...

EUVD-2025-179499

Malicious code in cross-env-geochemistry-global-juno npm...

EUVD-2025-179498

Malicious code in cross-env-native-centaurus-dynamo npm...

EUVD-2025-179497

Malicious code in cross-env-package-rimraf-antares npm...

EUVD-2025-179479

Malicious code in cryptography-cross-env-google-yildun npm...

EUVD-2025-180226

Malicious code in auth0-andromeda-heka-cross-env npm...

Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186387 Malicious code in cross-env-vega-native-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b88b84d1c86a43320f37cac5762a0889d3ed25dbab643a50bc6404d8950ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178216

Malicious code in karma-cross-env-mocha-grus npm...

MAL-2025-186385 Malicious code in cross-env-package-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b7e5135953bf968f903061df1ef7829176346806c7e274868c5ef4f82dc597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187145 Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190067 Malicious code in unuk-hapi-cross-env-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d337623dc4dce49e5bb465b6ab727eee58fb69714217f60caaed1fcd72d1c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...