1051 matches found
MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187389 Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186821 Malicious code in eris-umbra-dotenv-scorpius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7714f75abefdecf0f36cce8d8391b67049c271697d541efac035b1b66ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185534 Malicious code in archaeometry-cordelia-capella-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2c8d6a31e349fd295ea6069c1f1bc56f8eba23734d8405f248f309f202a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186627 Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116709
Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...
Malicious code in webpack-dotenv-upgrade-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c14c5941a4916f942059840163dc3766f319a05cd42f18f3b96ca5beb4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114407
Malicious code in dotenv-blitz-gatsby-publish npm...
EUVD-2025-123656
Malicious code in pipe-phenomic-zenith-dotenv-safe npm...
EUVD-2025-123982
Malicious code in package-lyra-postgres-dotenv-parse-variables npm...
EUVD-2025-121934
Malicious code in slides-non-blocking-dotenv-safe-loopback npm...
EUVD-2025-114406
Malicious code in dotenv-cassini-andromeda-slides npm...
Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121877
Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...