Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120259

Malicious code in xenon-xenos-sadr-dotenv-parse-variables npm...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

EUVD-2025-122659

Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...

EUVD-2025-123982

Malicious code in package-lyra-postgres-dotenv-parse-variables npm...

EUVD-2025-120817

Malicious code in venus-figures-configstore-dotenv-parse-variables npm...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-120164

Malicious code in yakutsk-electron-request-dotenv-safe npm...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

EUVD-2025-124384

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123656

Malicious code in pipe-phenomic-zenith-dotenv-safe npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

EUVD-2025-124675

Malicious code in mysql-dactyl-dotenv-safe-sadr npm...

MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114325

Malicious code in dotenv-solis-hydra-fork npm...

EUVD-2025-124258

Malicious code in nova-passport-hyperion-dotenv-safe npm...

Improper Configuration Management

TinyEnv is vulnerable to Improper Configuration Management. The vulnerability is due to the application not requiring the .env file to exist when loading environment variables, which allows an attacker or misconfiguration to cause the application to run with insecure defaults or missing...