MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145375 Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114348

Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

EUVD-2025-112052

Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...

EUVD-2025-114354

Malicious code in dotenv-safe-hyperion-karma-stream npm...

EUVD-2025-124633

Malicious code in native-backend-dotenv-safe-mongodb npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-111660

Malicious code in lint-staged-dotenv-safe-pulsar-restart npm...

EUVD-2025-112667

Malicious code in hydra-iota-metalsmith-dotenv-safe npm...

EUVD-2025-112541

Malicious code in indus-passport-oauth-dotenv-safe npm...

EUVD-2025-112392

Malicious code in iota-dotenv-safe-webdriver-mocha-mutation npm...

EUVD-2025-112299

Malicious code in janus-jekyll-parcel-dotenv-safe npm...

EUVD-2025-112208

Malicious code in jekyll-framework-meteor-dotenv-safe npm...

EUVD-2025-112103

Malicious code in jsonp-spinner-dotenv-dotenv-safe npm...

EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

EUVD-2025-111956

Malicious code in kaus-umbra-dotenv-safe-version npm...

EUVD-2025-111835

Malicious code in leda-koa-dotenv-safe-atlas npm...

Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...