1044 matches found
MAL-2025-186821 Malicious code in eris-umbra-dotenv-scorpius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7714f75abefdecf0f36cce8d8391b67049c271697d541efac035b1b66ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113286
Malicious code in ganymede-uglify-js-quark-dotenv npm...
EUVD-2025-123529
Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...
EUVD-2025-114753
Malicious code in csv-rollup-dotenv-yonder npm...
EUVD-2025-112707
Malicious code in hugo-toml-blitz-dotenv npm...
EUVD-2025-114381
Malicious code in dotenv-parse-variables-nightmare-aether-run-script npm...
EUVD-2025-121720
Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...
EUVD-2025-123656
Malicious code in pipe-phenomic-zenith-dotenv-safe npm...
EUVD-2025-122330
Malicious code in sagitta-dotenv-parse-variables-sedna-mutation npm...
EUVD-2025-120259
Malicious code in xenon-xenos-sadr-dotenv-parse-variables npm...
EUVD-2025-114351
Malicious code in dotenv-safe-lint-standard-stream npm...
Malicious code in ora-postcss-dotenv-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116596
Malicious code in apollo-dotenv-safe-adonis-slidev npm...
EUVD-2025-112126
Malicious code in json-ursa-css-loader-dotenv npm...
EUVD-2025-112977
Malicious code in halley-dotenv-parse-variables-hermes-promise npm...
EUVD-2025-111334
Malicious code in mdx-telesto-dotenv-elara npm...
EUVD-2025-114417
Malicious code in dorado-local-dotenv-safe-spawn npm...
EUVD-2025-122271
Malicious code in sails-lint-staged-dotenv-rollup-plugin npm...
Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...