MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144157 Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

EUVD-2025-123211

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...

Malicious code in sails-dotenv-safe-centaurus-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121725

Malicious code in spinner-jabbah-dotenv-safe-thuban npm...

EUVD-2025-122329

Malicious code in sagitta-elara-dotenv-safe-yakutsk npm...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-114366

Malicious code in dotenv-safe-astro-sirius-sedna npm...

EUVD-2025-114334

Malicious code in dotenv-safe-rocket-yildun-electron-builder npm...

EUVD-2025-115233

Malicious code in comet-fomalhaut-dotenv-safe-polaris npm...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

EUVD-2025-114364

Malicious code in dotenv-safe-bunyan-private-umbra npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-123997

Malicious code in package-await-dotenv-safe-acamar npm...

Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114328

Malicious code in dotenv-safe-upgrade-neptune-pyxis npm...

EUVD-2025-113667

Malicious code in fetch-halley-await-dotenv-safe npm...

EUVD-2025-122237

Malicious code in sass-loader-xml-altair-dotenv-safe npm...