6801 matches found
EUVD-2025-179312
Malicious code in despina-publish-spectron-webdriver-dotenv-safe npm...
EUVD-2025-179110
Malicious code in envconfig-dotenv-safe-middleware-javascript npm...
EUVD-2025-176905
Malicious code in pulsar-graviton-dotenv-safe-nuxtjs npm...
EUVD-2025-180336
Malicious code in areology-atlas-dotenv-safe-greatfilter npm...
EUVD-2025-177565
Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...
EUVD-2025-178064
Malicious code in lint-staged-tailwindcss-altair-dotenv-safe npm...
EUVD-2025-178105
Malicious code in library-dotenv-safe-gridsome-singularity npm...
EUVD-2025-177629
Malicious code in neutronstar-quark-dotenv-safe-koa npm...
EUVD-2025-175509
Malicious code in xenobiology-technocracy-dotenv-safe-brane npm...
MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179260
Malicious code in dotenv-safe-nodemon-ariel-petrology npm...
EUVD-2025-179261
Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...
EUVD-2025-177300
Malicious code in passport-semantic-ui-miranda-dotenv-safe npm...
EUVD-2025-179257
Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-178177
Malicious code in kronos-ichnology-dotenv-safe-seismology npm...
EUVD-2025-175840
Malicious code in umbra-australis-dotenv-safe-google npm...
EUVD-2025-179436
Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...
MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...