MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188169 Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190288 Malicious code in webpack-dotenv-safe-avior-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef999ad1a80cec0d0e2ca09865a600eb285869e029c47714d54436be3341dbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectroscopy-dotenv-cassini-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0877ae9987490da3e59673ad1d155843077b9fb9419c1942c74445d2543962a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175588

Malicious code in webpack-dotenv-safe-avior-nodejs npm...

EUVD-2025-179107

Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy npm...

EUVD-2025-177960

Malicious code in markdown-cors-janus-dotenv-parse-variables npm...

EUVD-2025-179264

Malicious code in dotenv-parse-variables-init-child-process-genomics npm...

EUVD-2025-177629

Malicious code in neutronstar-quark-dotenv-safe-koa npm...

Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-dotenv-safe-run-script-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-json-husky-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b97c7a91f7c4306ed3e704e7d987f5ad1bfcf878a6b3f756ab08441f24198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176547

Malicious code in sails-dotenv-adonis-antd npm...

EUVD-2025-175921

Malicious code in tool-dependencies-dotenv-library npm...

EUVD-2025-175571

Malicious code in weywot-tool-eslint-config-dotenv npm...

EUVD-2025-180354

Malicious code in archaeometry-cordelia-capella-dotenv npm...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

EUVD-2025-179110

Malicious code in envconfig-dotenv-safe-middleware-javascript npm...

EUVD-2025-176297

Malicious code in socketio-elara-europa-dotenv npm...

EUVD-2025-179258

Malicious code in dotenv-safe-parsec-soap-polaris npm...