EUVD-2025-112155

Malicious code in jovian-proxima-dotenv-ariel npm...

EUVD-2025-114393

Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...

EUVD-2025-121720

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...

EUVD-2025-116904

Malicious code in achernar-halley-dotenv-safe-foundation npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

EUVD-2025-124845

Malicious code in mocha-dotenv-node-sass-sagitta npm...

EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

EUVD-2025-116595

Malicious code in apollo-elara-dotenv-parse-variables-charon npm...

EUVD-2025-122330

Malicious code in sagitta-dotenv-parse-variables-sedna-mutation npm...

EUVD-2025-124566

Malicious code in neptune-blaze-quantum-dotenv npm...

EUVD-2025-114550

Malicious code in deneb-testcafe-dotenv-safe-vuepress npm...

EUVD-2025-122755

Malicious code in rehype-dotenv-safe-electron-builder-zenobia npm...

EUVD-2025-112923

Malicious code in hapi-markdown-dotenv-spinner npm...

EUVD-2025-114396

Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...

Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116060

Malicious code in blitz-dotenv-safe-chai-ganymede npm...

EUVD-2025-114386

Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...

Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...