EUVD-2025-120475

Malicious code in wezen-framework-dotenv-safe-testcafe npm...

EUVD-2025-113181

Malicious code in global-dotenv-safe-mysql-mira npm...

EUVD-2025-114340

Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...

EUVD-2025-114350

Malicious code in dotenv-safe-lynx-ursa-restart npm...

EUVD-2025-112113

Malicious code in jsonp-lint-meissa-dotenv-safe npm...

EUVD-2025-120384

Malicious code in wolf-dotenv-safe-init-process npm...

Malicious code in sails-dotenv-safe-centaurus-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112103

Malicious code in jsonp-spinner-dotenv-dotenv-safe npm...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120156

Malicious code in yakutsk-polaris-dotenv-safe-izar npm...

EUVD-2025-120661

Malicious code in warp-dotenv-safe-rehype-hermes npm...

EUVD-2025-114335

Malicious code in dotenv-safe-quito-sagitta-spawn npm...

EUVD-2025-112299

Malicious code in janus-jekyll-parcel-dotenv-safe npm...

EUVD-2025-114366

Malicious code in dotenv-safe-astro-sirius-sedna npm...

EUVD-2025-114327

Malicious code in dotenv-safe-wezen-loop-restart npm...

EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...