136 matches found
EUVD-2025-111507
Malicious code in lyra-grus-csv-dotenv-parse-variables npm...
EUVD-2025-115938
Malicious code in buffer-oberon-dotenv-parse-variables-async npm...
EUVD-2025-124219
Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...
EUVD-2025-114376
Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor npm...
EUVD-2025-121616
Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...
EUVD-2025-115253
Malicious code in colors-neptune-dotenv-parse-variables-impulse npm...
EUVD-2025-114395
Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...
EUVD-2025-112210
Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...
EUVD-2025-114385
Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...
EUVD-2025-114371
Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...
EUVD-2025-115504
Malicious code in chai-protractor-dotenv-parse-variables-native npm...
EUVD-2025-123472
Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...
Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111680
Malicious code in lint-centaurus-vuetify-dotenv-parse-variables npm...
EUVD-2025-112346
Malicious code in izar-virgo-library-dotenv-parse-variables npm...
EUVD-2025-115766
Malicious code in callisto-levels-subscription-dotenv-parse-variables npm...
EUVD-2025-116709
Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...
Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...