1051 matches found
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kaus-umbra-dotenv-safe-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113765
Malicious code in exec-jabbah-dotenv-parse-variables-neptune npm...
Malicious code in orbit-native-dotenv-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111334
Malicious code in mdx-telesto-dotenv-elara npm...
EUVD-2025-116482
Malicious code in astro-xo-dotenv-parse-variables-xml npm...
Malicious code in eclipse-dotenv-sagitta-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d0062ecba0912e47bbf94075c797d1732298e682066a48aaee95cdc99b2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115179
Malicious code in commitizen-dotenv-safe-tool-virgo npm...
Malicious code in tool-dotenv-safe-deimos-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dd26ce16209c77a21640e06bf2d7589940321cc0ca582d08066c674a8639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-local-dotenv-safe-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113932
Malicious code in eris-nightwatch-axios-dotenv-safe npm...
EUVD-2025-124012
Malicious code in orbit-native-dotenv-oauth npm...
Malicious code in karma-delphinus-materialize-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faadf9be0238abe5bb881e8455b0643e7869d291ed29187136ce49f3e8fedc7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114365
Malicious code in dotenv-safe-astro-supervisor-blitz npm...
EUVD-2025-116626
Malicious code in apex-dotenv-parse-variables-wezen-ora npm...
Malicious code in dotenv-safe-elektra-build-octans (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111787
Malicious code in less-loader-pino-dotenv-safe-quark npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...