5967 matches found
EUVD-2025-112052
Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...
Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121115
Malicious code in triton-dotenv-safe-typeorm-vulcan npm...
EUVD-2025-114348
Malicious code in dotenv-safe-mongodb-aldebaran-nashira npm...
EUVD-2025-114341
Malicious code in dotenv-safe-parcel-convict-umbriel npm...
EUVD-2025-122473
Malicious code in rimraf-dotenv-safe-wasat-hugo npm...
EUVD-2025-113496
Malicious code in fornax-dotenv-safe-delphinus-kronos npm...
EUVD-2025-122388
Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...
Malicious code in dotenv-safe-bunyan-private-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4780bb51498043095d7629cecb40fa21a3ad1bfe31e192d0c8439d367eb40719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114349
Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...
EUVD-2025-115006
Malicious code in cordelia-miranda-dotenv-safe-command npm...
EUVD-2025-111948
Malicious code in kinetic-bunyan-dotenv-safe-quantum npm...
EUVD-2025-114334
Malicious code in dotenv-safe-rocket-yildun-electron-builder npm...
EUVD-2025-115741
Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe npm...
MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141747 Malicious code in dotenv-safe-dactyl-mira-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ec1957a8e508198687aa6db75cbf6436cd19dca66de00383f10e5b0c6ddd76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139449 Malicious code in antares-xanadu-delphinus-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74bc9a61c43f8b3b4c87c88e18264683cf969e9cf7073998f6774e77b9a36b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...