Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123211

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

Malicious code in sails-dotenv-safe-centaurus-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121740

Malicious code in spinner-apex-vega-dotenv npm...

EUVD-2025-123897

Malicious code in pegasus-dotenv-safe-build-wolf npm...

EUVD-2025-123875

Malicious code in pegasus-publish-mongoose-dotenv npm...

EUVD-2025-123286

Malicious code in promise-delphinus-dotenv-parse-variables-ursa npm...

EUVD-2025-124029

Malicious code in ora-postcss-dotenv-server npm...

EUVD-2025-114323

Malicious code in dotenv-winston-yakutsk-csrf npm...

EUVD-2025-114403

Malicious code in dotenv-docusaurus-telesto-command npm...

EUVD-2025-114394

Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...

EUVD-2025-113667

Malicious code in fetch-halley-await-dotenv-safe npm...

EUVD-2025-114402

Malicious code in dotenv-enif-carina-fetch npm...

EUVD-2025-114387

Malicious code in dotenv-parse-variables-got-hermes-octans npm...

Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114332

Malicious code in dotenv-safe-semantic-ui-corvus-release-it npm...

EUVD-2025-112976

Malicious code in halley-dotenv-safe-rehype-cross-env npm...

EUVD-2025-124793

Malicious code in mongodb-dotenv-transform-alphard npm...

Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...