6816 matches found
MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121934
Malicious code in slides-non-blocking-dotenv-safe-loopback npm...
EUVD-2025-120475
Malicious code in wezen-framework-dotenv-safe-testcafe npm...
EUVD-2025-123734
Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...
EUVD-2025-111956
Malicious code in kaus-umbra-dotenv-safe-version npm...
EUVD-2025-122237
Malicious code in sass-loader-xml-altair-dotenv-safe npm...
EUVD-2025-114329
Malicious code in dotenv-safe-ultra-lacerta-cors npm...
EUVD-2025-121381
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...
Malicious code in dotenv-safe-norma-hydra-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114959
Malicious code in corvus-dotenv-safe-uninstall-babel npm...
EUVD-2025-114359
Malicious code in dotenv-safe-dynamo-proxima-async npm...
EUVD-2025-112103
Malicious code in jsonp-spinner-dotenv-dotenv-safe npm...
EUVD-2025-115800
Malicious code in callback-private-tool-dotenv-safe npm...
EUVD-2025-115006
Malicious code in cordelia-miranda-dotenv-safe-command npm...
EUVD-2025-114361
Malicious code in dotenv-safe-development-command-non-blocking npm...
EUVD-2025-114337
Malicious code in dotenv-safe-protractor-bellatrix-janus npm...
EUVD-2025-120156
Malicious code in yakutsk-polaris-dotenv-safe-izar npm...
Malicious code in dotenv-safe-hermes-config-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...