EUVD-2025-114348

Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...

EUVD-2025-123988

Malicious code in package-jupiter-dotenv-safe-carpo npm...

EUVD-2025-114359

Malicious code in dotenv-safe-dynamo-proxima-async npm...

EUVD-2025-112052

Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...

EUVD-2025-122543

Malicious code in restart-dotenv-safe-proxima-celeste npm...

EUVD-2025-122473

Malicious code in rimraf-dotenv-safe-wasat-hugo npm...

EUVD-2025-115741

Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe npm...

EUVD-2025-111524

Malicious code in lynx-dotenv-safe-nodejs-json npm...

EUVD-2025-123260

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...

EUVD-2025-124768

Malicious code in mongoose-dotenv-safe-fornax-xerxes npm...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

EUVD-2025-112392

Malicious code in iota-dotenv-safe-webdriver-mocha-mutation npm...

EUVD-2025-114341

Malicious code in dotenv-safe-parcel-convict-umbriel npm...

EUVD-2025-113496

Malicious code in fornax-dotenv-safe-delphinus-kronos npm...

EUVD-2025-111948

Malicious code in kinetic-bunyan-dotenv-safe-quantum npm...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114334

Malicious code in dotenv-safe-rocket-yildun-electron-builder npm...

Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...