5967 matches found
Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120156
Malicious code in yakutsk-polaris-dotenv-safe-izar npm...
EUVD-2025-123362
Malicious code in process-nashira-alphard-dotenv-safe npm...
EUVD-2025-121381
Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...
EUVD-2025-114356
Malicious code in dotenv-safe-global-jsonp-centaurus npm...
EUVD-2025-114831
Malicious code in cross-env-zenith-dotenv-safe-cypress npm...
EUVD-2025-115289
Malicious code in cluster-auth0-json-dotenv-safe npm...
EUVD-2025-120657
Malicious code in warp-miranda-dotenv-safe-duplex npm...
EUVD-2025-112976
Malicious code in halley-dotenv-safe-rehype-cross-env npm...
MAL-2025-147449 Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115233
Malicious code in comet-fomalhaut-dotenv-safe-polaris npm...
MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148287 Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141758 Malicious code in dotenv-safe-lint-standard-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96ce93bc5896847055a774b8ee4747daf6ed0538e96b9ffb3a4bcc8c1f03366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...