EUVD-2025-113932

Malicious code in eris-nightwatch-axios-dotenv-safe npm...

EUVD-2025-123642

Malicious code in playwright-cressida-rehype-dotenv-safe npm...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114326

Malicious code in dotenv-safe-zenith-configstore-fetch npm...

EUVD-2025-114072

Malicious code in enceladus-toml-dotenv-safe-aether npm...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111956

Malicious code in kaus-umbra-dotenv-safe-version npm...

Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

EUVD-2025-122936

Malicious code in query-winston-taurus-dotenv-safe npm...

EUVD-2025-114329

Malicious code in dotenv-safe-ultra-lacerta-cors npm...

EUVD-2025-116060

Malicious code in blitz-dotenv-safe-chai-ganymede npm...

Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114343

Malicious code in dotenv-safe-npm-json-chromedriver npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145933 Malicious code in package-jupiter-dotenv-safe-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbaf1d581e52bc2f97c438b473587e99860b9bda454d248416a4103e16aa1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...