EUVD-2025-179260

Malicious code in dotenv-safe-nodemon-ariel-petrology npm...

EUVD-2025-179255

Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...

EUVD-2025-179256

Malicious code in dotenv-safe-sedimentology-wolf-singularity npm...

EUVD-2025-179079

Malicious code in eridanus-antimatter-figures-dotenv-safe npm...

Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179258

Malicious code in dotenv-safe-parsec-soap-polaris npm...

EUVD-2025-177979

Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...

EUVD-2025-176786

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver npm...

EUVD-2025-179257

Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...

MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175521

Malicious code in xanthus-dotenv-safe-markdownlint-xerxes npm...

EUVD-2025-180018

Malicious code in blueshift-lynx-dotenv-safe-morgan npm...

MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178177

Malicious code in kronos-ichnology-dotenv-safe-seismology npm...

EUVD-2025-179436

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...

EUVD-2025-179110

Malicious code in envconfig-dotenv-safe-middleware-javascript npm...

EUVD-2025-176905

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs npm...

EUVD-2025-180336

Malicious code in areology-atlas-dotenv-safe-greatfilter npm...

EUVD-2025-177565

Malicious code in node-sass-ignite-dotenv-safe-neptunology npm...

MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...