EUVD-2025-120164

Malicious code in yakutsk-electron-request-dotenv-safe npm...

EUVD-2025-115261

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...

EUVD-2025-115289

Malicious code in cluster-auth0-json-dotenv-safe npm...

EUVD-2025-120657

Malicious code in warp-miranda-dotenv-safe-duplex npm...

EUVD-2025-114115

Malicious code in eleventy-dotenv-node-config-restart npm...

EUVD-2025-111794

Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-120475

Malicious code in wezen-framework-dotenv-safe-testcafe npm...

EUVD-2025-120563

Malicious code in webdriverio-dotenv-safe-andromeda-cache npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-124675

Malicious code in mysql-dactyl-dotenv-safe-sadr npm...

EUVD-2025-114396

Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...

Malicious code in buffer-transport-dotenv-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d83035ce63668bd4eb199426469192d2492c2d5e513bc731b0d837d9e29673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112235

Malicious code in javascript-dotenv-quasar-spica npm...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

EUVD-2025-114408

Malicious code in dotenv-avior-native-blitz npm...

EUVD-2025-116626

Malicious code in apex-dotenv-parse-variables-wezen-ora npm...

EUVD-2025-112920

Malicious code in hapi-morgan-dotenv-parse-variables-sirius npm...

Malicious code in titan-dotenv-rigel-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9d37486aa9438dc0b0d6ae2a1673e01db0f52d873ffe40f89882c658970cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...