MAL-2025-146883 Malicious code in pyxis-mysql-dotenv-safe-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5988490b8f2fb96a314f256df9f876d0532b41261f9c1cb297cefb81f1d69354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142826 Malicious code in ganymede-uglify-js-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df50c36528c4a8e1bab4e35ccc450588e1ba30021f8c1a6b0fc5acae6fac685a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149395 Malicious code in webpack-dotenv-upgrade-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c14c5941a4916f942059840163dc3766f319a05cd42f18f3b96ca5beb4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115294

Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...

Malicious code in eclipse-dotenv-sagitta-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7d0062ecba0912e47bbf94075c797d1732298e682066a48aaee95cdc99b2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122561

Malicious code in rest-publish-algol-dotenv-parse-variables npm...

EUVD-2025-120521

Malicious code in webpack-supervisor-dotenv-vega npm...

EUVD-2025-124545

Malicious code in neptune-pm2-dynamo-dotenv-safe npm...

EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

EUVD-2025-114358

Malicious code in dotenv-safe-elektra-build-octans npm...

MAL-2025-141048 Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...