EUVD-2025-114326

Malicious code in dotenv-safe-zenith-configstore-fetch npm...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-114365

Malicious code in dotenv-safe-astro-supervisor-blitz npm...

EUVD-2025-114366

Malicious code in dotenv-safe-astro-sirius-sedna npm...

MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

EUVD-2025-114342

Malicious code in dotenv-safe-ophiuchus-transport-carpo npm...

EUVD-2025-124313

Malicious code in non-blocking-dotenv-safe-got-castor npm...

EUVD-2025-114335

Malicious code in dotenv-safe-quito-sagitta-spawn npm...

EUVD-2025-120661

Malicious code in warp-dotenv-safe-rehype-hermes npm...

Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116596

Malicious code in apollo-dotenv-safe-adonis-slidev npm...

EUVD-2025-114349

Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

EUVD-2025-123529

Malicious code in postcss-loader-dotenv-safe-yakutsk-dione npm...

EUVD-2025-116060

Malicious code in blitz-dotenv-safe-chai-ganymede npm...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

EUVD-2025-114072

Malicious code in enceladus-toml-dotenv-safe-aether npm...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...