1051 matches found
Malicious code in sagitta-antares-winston-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177960
Malicious code in markdown-cors-janus-dotenv-parse-variables npm...
EUVD-2025-175571
Malicious code in weywot-tool-eslint-config-dotenv npm...
EUVD-2025-178493
Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...
MAL-2025-186616 Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179258
Malicious code in dotenv-safe-parsec-soap-polaris npm...
MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186612 Malicious code in dotenv-hexo-apollo-cryonics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179262
Malicious code in dotenv-safe-electron-delphinus-dynamo npm...
EUVD-2025-180272
Malicious code in async-dotenv-pino-pretty-odin npm...
EUVD-2025-177817
Malicious code in miranda-borealis-nova-dotenv-safe npm...
EUVD-2025-177300
Malicious code in passport-semantic-ui-miranda-dotenv-safe npm...
EUVD-2025-177488
Malicious code in octans-yakutsk-dotenv-leda npm...
EUVD-2025-179079
Malicious code in eridanus-antimatter-figures-dotenv-safe npm...
EUVD-2025-176560
Malicious code in sagitta-jest-orbit-dotenv npm...
EUVD-2025-179325
Malicious code in dependencies-taurus-dotenv-safe-ora npm...
EUVD-2025-175498
Malicious code in xenos-cladistics-dotenv-safe-joviology npm...