EUVD-2025-113441

Malicious code in foundation-sagitta-meissa-dotenv-parse-variables npm...

EUVD-2025-114327

Malicious code in dotenv-safe-wezen-loop-restart npm...

Malicious code in karma-delphinus-materialize-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faadf9be0238abe5bb881e8455b0643e7869d291ed29187136ce49f3e8fedc7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124258

Malicious code in nova-passport-hyperion-dotenv-safe npm...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

EUVD-2025-113308

Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...

EUVD-2025-113120

Malicious code in got-uninstall-dotenv-safe-test npm...

EUVD-2025-115108

Malicious code in concurrently-apex-promise-dotenv-parse-variables npm...

EUVD-2025-113617

Malicious code in firebase-dotenv-jekyll-jovian npm...

EUVD-2025-123982

Malicious code in package-lyra-postgres-dotenv-parse-variables npm...

EUVD-2025-111474

Malicious code in magellan-ignite-dotenv-safe-foundation npm...

EUVD-2025-112707

Malicious code in hugo-toml-blitz-dotenv npm...

EUVD-2025-114476

Malicious code in development-slidev-dotenv-parse-variables-sedna npm...

EUVD-2025-115630

Malicious code in cassini-titan-dotenv-babel npm...

Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115504

Malicious code in chai-protractor-dotenv-parse-variables-native npm...

EUVD-2025-112572

Malicious code in impulse-dotenv-safe-prompts-miranda npm...

EUVD-2025-114358

Malicious code in dotenv-safe-elektra-build-octans npm...

Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...