136 matches found
EUVD-2025-114378
Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...
EUVD-2025-121612
Malicious code in stream-dotenv-parse-variables-izar-antares npm...
EUVD-2025-122659
Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...
EUVD-2025-114369
Malicious code in dotenv-parse-variables-yonder-readable-vega npm...
EUVD-2025-114398
Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...
EUVD-2025-114382
Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...
EUVD-2025-113701
Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...
EUVD-2025-114390
Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...
EUVD-2025-123825
Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114388
Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...
EUVD-2025-123949
Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...
EUVD-2025-113458
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...
Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114692
Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...
EUVD-2025-114353
Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...
Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121868
Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...