EUVD-2025-114348

Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...

EUVD-2025-114359

Malicious code in dotenv-safe-dynamo-proxima-async npm...

EUVD-2025-114332

Malicious code in dotenv-safe-semantic-ui-corvus-release-it npm...

EUVD-2025-113667

Malicious code in fetch-halley-await-dotenv-safe npm...

EUVD-2025-111350

Malicious code in mdx-dotenv-safe-local-readable npm...

EUVD-2025-121115

Malicious code in triton-dotenv-safe-typeorm-vulcan npm...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124572

Malicious code in nebula-oauth-resolvers-dotenv-safe npm...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124258

Malicious code in nova-passport-hyperion-dotenv-safe npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122277

Malicious code in sails-dotenv-safe-centaurus-juno npm...

EUVD-2025-114334

Malicious code in dotenv-safe-rocket-yildun-electron-builder npm...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...