1044 matches found
EUVD-2025-201137
Malicious code in dotenv-intend npm...
Malicious Package
Overview dotenv-intend is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. On...
EUVD-2025-177711
Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...
EUVD-2025-179650
Malicious code in command-dotenv-safe-oberon-lint-staged npm...
Malicious code in archaeometry-cordelia-capella-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2c8d6a31e349fd295ea6069c1f1bc56f8eba23734d8405f248f309f202a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175528
Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...
Malicious code in dotenv-hexo-apollo-cryonics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177940
Malicious code in materialize-dotenv-safe-sublimation-meteor npm...
EUVD-2025-175509
Malicious code in xenobiology-technocracy-dotenv-safe-brane npm...
EUVD-2025-179259
Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...
EUVD-2025-177646
Malicious code in neptunology-husky-dotenv-parse-variables-got npm...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c772d9ee172d9d8a4149b89bb7e9d6739711a4032f4fe5a817bbd35ea114c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175548
Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...
EUVD-2025-177979
Malicious code in magellan-gravity-solarnebula-dotenv-safe npm...