EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

EUVD-2025-112958

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...

Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114367

Malicious code in dotenv-proxima-reveal-md-avior npm...

EUVD-2025-114344

Malicious code in dotenv-safe-norma-hydra-pulsar npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-114404

Malicious code in dotenv-csv-jekyll-soap npm...

Malicious code in mdx-telesto-dotenv-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d639617ddff6cedf719ea519832831b6dd8b74770dc8afe7915a69c5a7d7bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112052

Malicious code in jupiter-prettier-cordelia-dotenv-safe npm...

EUVD-2025-116247

Malicious code in babel-dotenv-mui-scorpius npm...

EUVD-2025-114326

Malicious code in dotenv-safe-zenith-configstore-fetch npm...

EUVD-2025-114072

Malicious code in enceladus-toml-dotenv-safe-aether npm...

Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-nashira-hapi-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13e1d855ebbd081de4732709aa42f352212523da47dd75c981a0026bc5281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123168

Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint npm...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116419

Malicious code in auriga-lint-staged-janus-dotenv-safe npm...

Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...