EUVD-2025-177874

Malicious code in metalsmith-json-husky-dotenv-safe npm...

EUVD-2025-175521

Malicious code in xanthus-dotenv-safe-markdownlint-xerxes npm...

EUVD-2025-180018

Malicious code in blueshift-lynx-dotenv-safe-morgan npm...

EUVD-2025-180336

Malicious code in areology-atlas-dotenv-safe-greatfilter npm...

EUVD-2025-176907

Malicious code in pulsar-dotenv-safe-redis-fermiparadox npm...

EUVD-2025-179256

Malicious code in dotenv-safe-sedimentology-wolf-singularity npm...

EUVD-2025-179260

Malicious code in dotenv-safe-nodemon-ariel-petrology npm...

MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178177

Malicious code in kronos-ichnology-dotenv-safe-seismology npm...

EUVD-2025-179079

Malicious code in eridanus-antimatter-figures-dotenv-safe npm...

EUVD-2025-176964

Malicious code in proxima-dotenv-safe-carpo-release-it npm...

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3665c39d41a5a94032ec0050cb7fbb6f9f77712de1214f36c8fa0b624f6c78b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177817

Malicious code in miranda-borealis-nova-dotenv-safe npm...

EUVD-2025-179325

Malicious code in dependencies-taurus-dotenv-safe-ora npm...

EUVD-2025-179262

Malicious code in dotenv-safe-electron-delphinus-dynamo npm...

EUVD-2025-179436

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...

MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...