1044 matches found
MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144157 Malicious code in kaus-umbra-dotenv-safe-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146644 Malicious code in promise-meteor-dotenv-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709454d142f7f534a5d50fd7d991e4274f59e8f69dc2746d85e4ff3417912ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141725 Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120247
Malicious code in xenos-magellan-callback-dotenv npm...
EUVD-2025-114367
Malicious code in dotenv-proxima-reveal-md-avior npm...
EUVD-2025-114386
Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...
EUVD-2025-124793
Malicious code in mongodb-dotenv-transform-alphard npm...
EUVD-2025-114336
Malicious code in dotenv-safe-public-puppeteer-publish npm...
Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114362
Malicious code in dotenv-safe-dactyl-mira-karma npm...
EUVD-2025-122881
Malicious code in rate-limiter-jwt-webdriver-mocha-dotenv npm...