302 matches found
EUVD-2025-120661
Malicious code in warp-dotenv-safe-rehype-hermes npm...
EUVD-2025-124042
Malicious code in ora-dotenv-safe-nodemon-postgres npm...
EUVD-2025-114345
Malicious code in dotenv-safe-non-blocking-bellatrix-proxima npm...
EUVD-2025-114358
Malicious code in dotenv-safe-elektra-build-octans npm...
EUVD-2025-114336
Malicious code in dotenv-safe-public-puppeteer-publish npm...
EUVD-2025-112299
Malicious code in janus-jekyll-parcel-dotenv-safe npm...
EUVD-2025-114355
Malicious code in dotenv-safe-hermes-config-stop npm...
MAL-2025-148287 Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121381
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...
Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112976
Malicious code in halley-dotenv-safe-rehype-cross-env npm...
Malicious code in sails-dotenv-safe-centaurus-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114362
Malicious code in dotenv-safe-dactyl-mira-karma npm...
EUVD-2025-114335
Malicious code in dotenv-safe-quito-sagitta-spawn npm...
Malicious code in dotenv-safe-norma-hydra-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112103
Malicious code in jsonp-spinner-dotenv-dotenv-safe npm...
EUVD-2025-120657
Malicious code in warp-miranda-dotenv-safe-duplex npm...
EUVD-2025-116246
Malicious code in babel-dotenv-safe-cosmos-resolvers npm...