EUVD-2025-176857

Malicious code in quark-dotenv-safe-run-script-planckscale npm...

EUVD-2025-176836

Malicious code in query-betelgeuse-nebula-dotenv-safe npm...

EUVD-2025-179256

Malicious code in dotenv-safe-sedimentology-wolf-singularity npm...

Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177979

Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...

EUVD-2025-178218

Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet npm...

MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178364

Malicious code in interstellarmedium-remark-procyon-dotenv-safe npm...

EUVD-2025-180018

Malicious code in blueshift-lynx-dotenv-safe-morgan npm...

Malicious code in quark-dotenv-safe-run-script-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179575

Malicious code in cordelia-indus-cors-dotenv-safe npm...

MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176907

Malicious code in pulsar-dotenv-safe-redis-fermiparadox npm...

EUVD-2025-177817

Malicious code in miranda-borealis-nova-dotenv-safe npm...

EUVD-2025-176786

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver npm...

EUVD-2025-179262

Malicious code in dotenv-safe-electron-delphinus-dynamo npm...

EUVD-2025-175528

Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...

EUVD-2025-179255

Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...

EUVD-2025-179259

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3665c39d41a5a94032ec0050cb7fbb6f9f77712de1214f36c8fa0b624f6c78b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...