Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116653

Malicious code in antares-xanadu-delphinus-dotenv-safe npm...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-114354

Malicious code in dotenv-safe-hyperion-karma-stream npm...

EUVD-2025-112208

Malicious code in jekyll-framework-meteor-dotenv-safe npm...

EUVD-2025-111787

Malicious code in less-loader-pino-dotenv-safe-quark npm...

EUVD-2025-114328

Malicious code in dotenv-safe-upgrade-neptune-pyxis npm...

EUVD-2025-120164

Malicious code in yakutsk-electron-request-dotenv-safe npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-114351

Malicious code in dotenv-safe-lint-standard-stream npm...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123642

Malicious code in playwright-cressida-rehype-dotenv-safe npm...

Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116197

Malicious code in barnard-dotenv-safe-elara-registry npm...

EUVD-2025-114329

Malicious code in dotenv-safe-ultra-lacerta-cors npm...

EUVD-2025-113120

Malicious code in got-uninstall-dotenv-safe-test npm...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...