1051 matches found
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-123472
Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...
EUVD-2025-120475
Malicious code in wezen-framework-dotenv-safe-testcafe npm...
EUVD-2025-114360
Malicious code in dotenv-safe-dotenv-safe-proxima-juno npm...
EUVD-2025-111660
Malicious code in lint-staged-dotenv-safe-pulsar-restart npm...
EUVD-2025-121868
Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...
EUVD-2025-111876
Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...
EUVD-2025-122658
Malicious code in repository-dotenv-safe-xanthus-orbit npm...
EUVD-2025-123825
Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...
Malicious code in dotenv-parse-variables-despina-helios-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115161
Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...
EUVD-2025-114368
Malicious code in dotenv-prettier-stylelint-fomalhaut-heka npm...
EUVD-2025-115504
Malicious code in chai-protractor-dotenv-parse-variables-native npm...
EUVD-2025-123326
Malicious code in procyon-hyperion-dotenv-parse-variables-blaze npm...
EUVD-2025-115363
Malicious code in child-process-dotenv-antares-dione npm...
EUVD-2025-115313
Malicious code in cli-flare-kronos-dotenv npm...
EUVD-2025-111207
Malicious code in meteor-dotenv-safe-rollup-pino-pretty npm...
EUVD-2025-113139
Malicious code in google-xerxes-dotenv-safe-jabbah npm...
Malicious code in dotenv-safe-upgrade-neptune-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993e6b712b213cecbfec8df45c31301cd66b05cbaf0dc19ed7a070c42eed4276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...