EUVD-2025-176565

Malicious code in sagitta-antares-winston-dotenv npm...

Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm)

The package dotenv-safe-winston-dotenv-safe-markdown-pdf was found to contain malicious code...