EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

Malicious code in dotenv-safe-upgrade-neptune-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993e6b712b213cecbfec8df45c31301cd66b05cbaf0dc19ed7a070c42eed4276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114379

Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe npm...

EUVD-2025-112541

Malicious code in indus-passport-oauth-dotenv-safe npm...

EUVD-2025-114359

Malicious code in dotenv-safe-dynamo-proxima-async npm...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115179

Malicious code in commitizen-dotenv-safe-tool-virgo npm...

EUVD-2025-116904

Malicious code in achernar-halley-dotenv-safe-foundation npm...

EUVD-2025-124313

Malicious code in non-blocking-dotenv-safe-got-castor npm...

Malicious code in public-kastra-odin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1ea1c041c1cc3c6f30b1c651a7cceface3a61fba53a9e639fdd1c11ed1ec79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123326

Malicious code in procyon-hyperion-dotenv-parse-variables-blaze npm...

EUVD-2025-114595

Malicious code in delphinus-dotenv-safe-dagda-antares npm...

EUVD-2025-120445

Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

EUVD-2025-112958

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...

Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...