EUVD-2025-122237

Malicious code in sass-loader-xml-altair-dotenv-safe npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

EUVD-2025-123997

Malicious code in package-await-dotenv-safe-acamar npm...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-114330

Malicious code in dotenv-safe-transport-corvus-hydra npm...

EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

Malicious code in karma-delphinus-materialize-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faadf9be0238abe5bb881e8455b0643e7869d291ed29187136ce49f3e8fedc7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124258

Malicious code in nova-passport-hyperion-dotenv-safe npm...

EUVD-2025-114355

Malicious code in dotenv-safe-hermes-config-stop npm...

EUVD-2025-113120

Malicious code in got-uninstall-dotenv-safe-test npm...

Malicious code in dotenv-safe-bunyan-private-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121195

Malicious code in tool-dotenv-safe-deimos-magellan npm...

EUVD-2025-124768

Malicious code in mongoose-dotenv-safe-fornax-xerxes npm...

EUVD-2025-121115

Malicious code in triton-dotenv-safe-typeorm-vulcan npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

EUVD-2025-122496

Malicious code in reveal-md-transform-miranda-dotenv-safe npm...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114358

Malicious code in dotenv-safe-elektra-build-octans npm...

Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...