1051 matches found
EUVD-2025-111507
Malicious code in lyra-grus-csv-dotenv-parse-variables npm...
EUVD-2025-121740
Malicious code in spinner-apex-vega-dotenv npm...
EUVD-2025-115119
Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...
EUVD-2025-120661
Malicious code in warp-dotenv-safe-rehype-hermes npm...
EUVD-2025-120384
Malicious code in wolf-dotenv-safe-init-process npm...
EUVD-2025-116217
Malicious code in backend-dotenv-adonis-webdriver-manager npm...
EUVD-2025-112393
Malicious code in iota-dotenv-parse-variables-envconfig-mdx npm...
EUVD-2025-114364
Malicious code in dotenv-safe-bunyan-private-umbra npm...
EUVD-2025-121725
Malicious code in spinner-jabbah-dotenv-safe-thuban npm...
MAL-2025-142826 Malicious code in ganymede-uglify-js-quark-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df50c36528c4a8e1bab4e35ccc450588e1ba30021f8c1a6b0fc5acae6fac685a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141717 Malicious code in dotenv-parse-variables-despina-helios-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114340
Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...
MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141758 Malicious code in dotenv-safe-lint-standard-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96ce93bc5896847055a774b8ee4747daf6ed0538e96b9ffb3a4bcc8c1f03366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141711 Malicious code in dotenv-parse-variables-callisto-oauth-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb5d62c0d246d9201d77e51324b2e594d0edc2bfeab4f70f8c8bbe9629df860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114356
Malicious code in dotenv-safe-global-jsonp-centaurus npm...