EUVD-2025-179253

Malicious code in dotenv-semantic-ui-fusion-hexo npm...

EUVD-2025-176871

Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-179268

Malicious code in dotenv-ophiuchus-steganography-event npm...

EUVD-2025-178493

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...

EUVD-2025-179775

Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv npm...

Malicious code in dotenv-semantic-ui-fusion-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584061c298f10964689f1ef6b99e08687def32aa09801e3a0bd33abfa06b5ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186616 Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186612 Malicious code in dotenv-hexo-apollo-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199267a35ed5937ef5f63c6920324dae39fe64bc54a1dd7c5dc19a3157ede4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179270

Malicious code in dotenv-hexo-apollo-cryonics npm...

EUVD-2025-179257

Malicious code in dotenv-safe-pino-pretty-terser-postcss npm...

EUVD-2025-179370

Malicious code in deimos-await-castor-dotenv npm...

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176786

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver npm...

EUVD-2025-180461

Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...

EUVD-2025-179007

Malicious code in event-bootes-dotenv-parse-variables-ursa npm...

EUVD-2025-176258

Malicious code in spectroscopy-dotenv-cassini-sedimentology npm...

EUVD-2025-176905

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs npm...

MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...