EUVD-2025-114393

Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

EUVD-2025-116709

Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

EUVD-2025-114353

Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...

EUVD-2025-114254

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables npm...

EUVD-2025-124219

Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...

EUVD-2025-115504

Malicious code in chai-protractor-dotenv-parse-variables-native npm...

EUVD-2025-114378

Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...

EUVD-2025-123472

Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-122561

Malicious code in rest-publish-algol-dotenv-parse-variables npm...

Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...