EUVD-2025-114395

Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...

EUVD-2025-121725

Malicious code in spinner-jabbah-dotenv-safe-thuban npm...

EUVD-2025-122237

Malicious code in sass-loader-xml-altair-dotenv-safe npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122135

Malicious code in sedna-promise-dotenv-parse-variables-vega npm...

EUVD-2025-112923

Malicious code in hapi-markdown-dotenv-spinner npm...

MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144157 Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123875

Malicious code in pegasus-publish-mongoose-dotenv npm...

EUVD-2025-114385

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...

EUVD-2025-122512

Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables npm...

EUVD-2025-114340

Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...

EUVD-2025-122659

Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...

EUVD-2025-122902

Malicious code in radiant-proxima-dotenv-safe-global npm...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116427

Malicious code in auriga-dotenv-draco-rollup-plugin npm...

EUVD-2025-121115

Malicious code in triton-dotenv-safe-typeorm-vulcan npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...