EUVD-2025-114340

Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...

EUVD-2025-121638

Malicious code in stop-bellatrix-sequelize-dotenv-safe npm...

Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114352

Malicious code in dotenv-safe-kronos-aurora-build npm...

EUVD-2025-112299

Malicious code in janus-jekyll-parcel-dotenv-safe npm...

EUVD-2025-121381

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...

EUVD-2025-123925

Malicious code in pavo-dotenv-safe-cosmos-cordelia npm...

EUVD-2025-113496

Malicious code in fornax-dotenv-safe-delphinus-kronos npm...

EUVD-2025-120156

Malicious code in yakutsk-polaris-dotenv-safe-izar npm...

EUVD-2025-124633

Malicious code in native-backend-dotenv-safe-mongodb npm...

Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114330

Malicious code in dotenv-safe-transport-corvus-hydra npm...

EUVD-2025-114343

Malicious code in dotenv-safe-npm-json-chromedriver npm...

EUVD-2025-114360

Malicious code in dotenv-safe-dotenv-safe-proxima-juno npm...

EUVD-2025-124042

Malicious code in ora-dotenv-safe-nodemon-postgres npm...

EUVD-2025-115741

Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe npm...

MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141048 Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...