6806 matches found
EUVD-2025-114330
Malicious code in dotenv-safe-transport-corvus-hydra npm...
EUVD-2025-123925
Malicious code in pavo-dotenv-safe-cosmos-cordelia npm...
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112667
Malicious code in hydra-iota-metalsmith-dotenv-safe npm...
EUVD-2025-122902
Malicious code in radiant-proxima-dotenv-safe-global npm...
EUVD-2025-112052
Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...
EUVD-2025-122277
Malicious code in sails-dotenv-safe-centaurus-juno npm...
EUVD-2025-122658
Malicious code in repository-dotenv-safe-xanthus-orbit npm...
EUVD-2025-113667
Malicious code in fetch-halley-await-dotenv-safe npm...
EUVD-2025-114358
Malicious code in dotenv-safe-elektra-build-octans npm...
Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120384
Malicious code in wolf-dotenv-safe-init-process npm...
EUVD-2025-114336
Malicious code in dotenv-safe-public-puppeteer-publish npm...
EUVD-2025-111956
Malicious code in kaus-umbra-dotenv-safe-version npm...
EUVD-2025-122237
Malicious code in sass-loader-xml-altair-dotenv-safe npm...
EUVD-2025-114329
Malicious code in dotenv-safe-ultra-lacerta-cors npm...