1044 matches found
Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111150
Malicious code in middleware-uninstall-dotenv-bulma npm...
EUVD-2025-124675
Malicious code in mysql-dactyl-dotenv-safe-sadr npm...
Malicious code in dotenv-safe-bunyan-private-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112052
Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...
EUVD-2025-116247
Malicious code in babel-dotenv-mui-scorpius npm...
MAL-2025-143187 Malicious code in hapi-link-dotenv-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7aff41ffcc47a9ce5cecc9896e60e7457b7563c695aa7759fd139e79d5032c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148068 Malicious code in solis-arcturus-dotenv-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87b0bfb0cd17d178e3cecbda0ef3048fd1066fb524f365964e3f00cb0dbdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145695 Malicious code in nuxtjs-astro-dotenv-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145125 Malicious code in mongodb-dotenv-transform-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8bc2251b0e9e448ee2693fef77c7fa881c2a5f852b1ebfbb70d8704705c11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...