EUVD-2025-120782

Malicious code in version-uglify-js-draco-dotenv npm...

EUVD-2025-114371

Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-122488

Malicious code in rigel-magellan-dotenv-parse-variables-mensa npm...

MAL-2025-145348 Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147862 Malicious code in sequelize-auth0-publish-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7997c1594e3c8ca4516fdc5903416d5f8cdf4e40750e3fc69f596f4832c1ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147788 Malicious code in sedna-promise-dotenv-parse-variables-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4106b8b561425fbf53c8ff86d6d731d1c4ce20b3a437fe2bd4f5ad0a701667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141725 Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141758 Malicious code in dotenv-safe-lint-standard-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96ce93bc5896847055a774b8ee4747daf6ed0538e96b9ffb3a4bcc8c1f03366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141777 Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143854 Malicious code in jasmine-grus-nightwatch-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4daf9d787d3a053b657f214222fea06c162724ee8a4fde668874c1b9b122b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121830

Malicious code in spawn-dotenv-dactyl-sirius npm...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...