303 matches found
EUVD-2025-114329
Malicious code in dotenv-safe-ultra-lacerta-cors npm...
MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141780 Malicious code in dotenv-safe-ultra-lacerta-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89439455b16a6902882a174b59f5147a826966cbf4cc56cdf6db7f191b9fa72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123260
Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...
EUVD-2025-123642
Malicious code in playwright-cressida-rehype-dotenv-safe npm...
EUVD-2025-122237
Malicious code in sass-loader-xml-altair-dotenv-safe npm...
EUVD-2025-114364
Malicious code in dotenv-safe-bunyan-private-umbra npm...
EUVD-2025-113181
Malicious code in global-dotenv-safe-mysql-mira npm...
EUVD-2025-112976
Malicious code in halley-dotenv-safe-rehype-cross-env npm...
MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122230
Malicious code in schema-dotenv-safe-europa-castor npm...
Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114348
Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...