302 matches found
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-175840
Malicious code in umbra-australis-dotenv-safe-google npm...
EUVD-2025-175528
Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...
EUVD-2025-177565
Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...
EUVD-2025-179575
Malicious code in cordelia-indus-cors-dotenv-safe npm...
EUVD-2025-178364
Malicious code in interstellarmedium-remark-procyon-dotenv-safe npm...
EUVD-2025-178105
Malicious code in library-dotenv-safe-gridsome-singularity npm...
EUVD-2025-177979
Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...
EUVD-2025-176836
Malicious code in query-betelgeuse-nebula-dotenv-safe npm...
EUVD-2025-179255
Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...
EUVD-2025-179259
Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...
EUVD-2025-179261
Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...
EUVD-2025-179650
Malicious code in command-dotenv-safe-oberon-lint-staged npm...
EUVD-2025-177629
Malicious code in neutronstar-quark-dotenv-safe-koa npm...
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179258
Malicious code in dotenv-safe-parsec-soap-polaris npm...
MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...