303 matches found
Malicious Package
Overview lint-staged-tailwindcss-altair-dotenv-safe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in metalsmith-json-husky-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b97c7a91f7c4306ed3e704e7d987f5ad1bfcf878a6b3f756ab08441f24198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3665c39d41a5a94032ec0050cb7fbb6f9f77712de1214f36c8fa0b624f6c78b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175840
Malicious code in umbra-australis-dotenv-safe-google npm...
EUVD-2025-175656
Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...
EUVD-2025-175528
Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...
EUVD-2025-175521
Malicious code in xanthus-dotenv-safe-markdownlint-xerxes npm...
EUVD-2025-177817
Malicious code in miranda-borealis-nova-dotenv-safe npm...