MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-124572

Malicious code in nebula-oauth-resolvers-dotenv-safe npm...

EUVD-2025-111350

Malicious code in mdx-dotenv-safe-local-readable npm...

EUVD-2025-122230

Malicious code in schema-dotenv-safe-europa-castor npm...

EUVD-2025-114331

Malicious code in dotenv-safe-transport-aether-miranda npm...

EUVD-2025-121638

Malicious code in stop-bellatrix-sequelize-dotenv-safe npm...

EUVD-2025-124768

Malicious code in mongoose-dotenv-safe-fornax-xerxes npm...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111524

Malicious code in lynx-dotenv-safe-nodejs-json npm...

EUVD-2025-123988

Malicious code in package-jupiter-dotenv-safe-carpo npm...

EUVD-2025-123260

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...

EUVD-2025-112052

Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...