Lucene search
+L

276 matches found

Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•6 views

Malicious code in dotenv-parse-variables-got-hermes-octans (npm)

Source: amazon-inspector f25f97964c2f26070ac5974345a378e144d266f2570ec41d0fa375f8934c90a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•9 views

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor (npm)

Source: amazon-inspector 01acb5cbcbe72e609c306db5528e68a96620e9d9b9c8ab33073d70c418e3a8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-gridsome-alphard-draco (npm)

Source: amazon-inspector 628a27e67aa9b7cf1b20fc8c732eaf132e775a099842505ee4c045a2d1c99569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•4 views

Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•4 views

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework (npm)

Source: amazon-inspector bdd4098cf7952532438e0fcee118c18ba0061965c413cfe88a091ffe48f76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•6 views

Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)

The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•4 views

Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)

Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•8 views

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•6 views

Malicious code in dotenv-parse-variables-nashira-hapi-iota (npm)

Source: amazon-inspector 5f13e1d855ebbd081de4732709aa42f352212523da47dd75c981a0026bc5281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm)

The package dotenv-parse-variables-neutrino-spinner-higgs was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)

The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•15 views

Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•6 views

Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•7 views

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•7 views

Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris (npm)

Source: amazon-inspector cc7e71c5fd5f6be469b7a62763ba0819de2f1561d0a7ac0b37fb5018accac39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder