1051 matches found
EUVD-2025-114354
Malicious code in dotenv-safe-hyperion-karma-stream npm...
Malicious code in hapi-link-dotenv-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7aff41ffcc47a9ce5cecc9896e60e7457b7563c695aa7759fd139e79d5032c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121909
Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...
EUVD-2025-120388
Malicious code in wolf-comet-dotenv-safe-element-ui npm...
EUVD-2025-114329
Malicious code in dotenv-safe-ultra-lacerta-cors npm...
EUVD-2025-114328
Malicious code in dotenv-safe-upgrade-neptune-pyxis npm...
EUVD-2025-112208
Malicious code in jekyll-framework-meteor-dotenv-safe npm...
EUVD-2025-116626
Malicious code in apex-dotenv-parse-variables-wezen-ora npm...
EUVD-2025-113932
Malicious code in eris-nightwatch-axios-dotenv-safe npm...
EUVD-2025-111787
Malicious code in less-loader-pino-dotenv-safe-quark npm...
MAL-2025-144157 Malicious code in kaus-umbra-dotenv-safe-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148115 Malicious code in spectron-dotenv-safe-titan-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112958
Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...
MAL-2025-141692 Malicious code in dorado-local-dotenv-safe-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114369
Malicious code in dotenv-parse-variables-yonder-readable-vega npm...