EUVD-2025-114391

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework npm...

Malicious code in tool-dotenv-safe-deimos-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dd26ce16209c77a21640e06bf2d7589940321cc0ca582d08066c674a8639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

EUVD-2025-122496

Malicious code in reveal-md-transform-miranda-dotenv-safe npm...

EUVD-2025-121195

Malicious code in tool-dotenv-safe-deimos-magellan npm...

EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

EUVD-2025-112541

Malicious code in indus-passport-oauth-dotenv-safe npm...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120722

Malicious code in vuetify-dotenv-safe-spectron-docusaurus npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116709

Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...

EUVD-2025-114396

Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...

EUVD-2025-122061

Malicious code in sequelize-auth0-publish-dotenv npm...

EUVD-2025-113932

Malicious code in eris-nightwatch-axios-dotenv-safe npm...

EUVD-2025-111139

Malicious code in mini-css-extract-plugin-heka-miranda-dotenv npm...

EUVD-2025-114367

Malicious code in dotenv-proxima-reveal-md-avior npm...

EUVD-2025-123772

Malicious code in phoebe-dotenv-parse-variables-command-tool npm...

EUVD-2025-123642

Malicious code in playwright-cressida-rehype-dotenv-safe npm...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...