EUVD-2025-120475

Malicious code in wezen-framework-dotenv-safe-testcafe npm...

EUVD-2025-122678

Malicious code in remark-dotenv-safe-betelgeuse-testcafe npm...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-123211

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...

EUVD-2025-124572

Malicious code in nebula-oauth-resolvers-dotenv-safe npm...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124313

Malicious code in non-blocking-dotenv-safe-got-castor npm...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

Malicious code in dotenv-safe-bunyan-private-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111948

Malicious code in kinetic-bunyan-dotenv-safe-quantum npm...

EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

EUVD-2025-114348

Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...

EUVD-2025-114595

Malicious code in delphinus-dotenv-safe-dagda-antares npm...

EUVD-2025-114340

Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...