EUVD-2025-123961

Malicious code in parcel-impulse-dotenv-cosmos npm...

EUVD-2025-114391

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework npm...

EUVD-2025-113286

Malicious code in ganymede-uglify-js-quark-dotenv npm...

EUVD-2025-113120

Malicious code in got-uninstall-dotenv-safe-test npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

Malicious code in corvus-perseus-chariklo-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32839493716ccf5866966fc2c0c28d2135ef1a738aaac9f3df7a8bb551e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116596

Malicious code in apollo-dotenv-safe-adonis-slidev npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-123278

Malicious code in promise-meteor-dotenv-antd npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-124226

Malicious code in nuxtjs-astro-dotenv-toml npm...

Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115810

Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...

EUVD-2025-123997

Malicious code in package-await-dotenv-safe-acamar npm...

EUVD-2025-116595

Malicious code in apollo-elara-dotenv-parse-variables-charon npm...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-proxima-reveal-md-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0b1c45f986cf6fbc4af0e177909c6672bece01b81cf95400b5748e8436cf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122237

Malicious code in sass-loader-xml-altair-dotenv-safe npm...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...