302 matches found
MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178177
Malicious code in kronos-ichnology-dotenv-safe-seismology npm...
EUVD-2025-177874
Malicious code in metalsmith-json-husky-dotenv-safe npm...
MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121934
Malicious code in slides-non-blocking-dotenv-safe-loopback npm...
EUVD-2025-114329
Malicious code in dotenv-safe-ultra-lacerta-cors npm...
EUVD-2025-123642
Malicious code in playwright-cressida-rehype-dotenv-safe npm...
EUVD-2025-114326
Malicious code in dotenv-safe-zenith-configstore-fetch npm...
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115261
Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin npm...
EUVD-2025-120388
Malicious code in wolf-comet-dotenv-safe-element-ui npm...
EUVD-2025-123997
Malicious code in package-await-dotenv-safe-acamar npm...
EUVD-2025-112208
Malicious code in jekyll-framework-meteor-dotenv-safe npm...
EUVD-2025-114337
Malicious code in dotenv-safe-protractor-bellatrix-janus npm...
EUVD-2025-115810
Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...