EUVD-2025-121720

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...

EUVD-2025-124219

Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...

MAL-2025-145702 Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1154cbe9c318d29f837435506ab9c0a77e01862465e6de0a19988d4800b301f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd288c0cffc74a3b962530a540a7cc62f2288445fd2f50c7aded40160d08871 The OpenSSF Package Analysis project identified 'nuxtjsdotenv' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...