EUVD-2025-123997

Malicious code in package-await-dotenv-safe-acamar npm...

EUVD-2025-115810

Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...

EUVD-2025-114072

Malicious code in enceladus-toml-dotenv-safe-aether npm...

EUVD-2025-122496

Malicious code in reveal-md-transform-miranda-dotenv-safe npm...

EUVD-2025-114337

Malicious code in dotenv-safe-protractor-bellatrix-janus npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116653

Malicious code in antares-xanadu-delphinus-dotenv-safe npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-114354

Malicious code in dotenv-safe-hyperion-karma-stream npm...

EUVD-2025-112208

Malicious code in jekyll-framework-meteor-dotenv-safe npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-114328

Malicious code in dotenv-safe-upgrade-neptune-pyxis npm...

EUVD-2025-120164

Malicious code in yakutsk-electron-request-dotenv-safe npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...