303 matches found
EUVD-2025-122277
Malicious code in sails-dotenv-safe-centaurus-juno npm...
EUVD-2025-123734
Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...
EUVD-2025-123529
Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...
EUVD-2025-123211
Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...
EUVD-2025-124572
Malicious code in nebula-oauth-resolvers-dotenv-safe npm...
EUVD-2025-124564
Malicious code in neptune-dotenv-safe-antares-spawn npm...
EUVD-2025-124313
Malicious code in non-blocking-dotenv-safe-got-castor npm...
EUVD-2025-124258
Malicious code in nova-passport-hyperion-dotenv-safe npm...
EUVD-2025-124042
Malicious code in ora-dotenv-safe-nodemon-postgres npm...
EUVD-2025-123925
Malicious code in pavo-dotenv-safe-cosmos-cordelia npm...
EUVD-2025-121381
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...
Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114330
Malicious code in dotenv-safe-transport-corvus-hydra npm...
EUVD-2025-122388
Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...
Malicious code in spectron-dotenv-safe-titan-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...