EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-124202

Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...

EUVD-2025-120139

Malicious code in yaml-kaus-polaris-dotenv npm...

EUVD-2025-121612

Malicious code in stream-dotenv-parse-variables-izar-antares npm...

EUVD-2025-111163

Malicious code in middleware-dotenv-pegasus-mensa npm...

EUVD-2025-111614

Malicious code in local-wezen-dotenv-safe-ultra npm...

Malicious code in dotenv-parse-variables-got-hermes-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25f97964c2f26070ac5974345a378e144d266f2570ec41d0fa375f8934c90a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115863

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat npm...

EUVD-2025-115006

Malicious code in cordelia-miranda-dotenv-safe-command npm...

EUVD-2025-112235

Malicious code in javascript-dotenv-quasar-spica npm...

EUVD-2025-114405

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...

EUVD-2025-113474

Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...

Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113089

Malicious code in gravity-dotenv-safe-quark-publish npm...

EUVD-2025-123039

Malicious code in pyxis-mysql-dotenv-safe-lyra npm...

EUVD-2025-114408

Malicious code in dotenv-avior-native-blitz npm...

EUVD-2025-123260

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin npm...

EUVD-2025-112925

Malicious code in hapi-link-dotenv-registry npm...

EUVD-2025-114333

Malicious code in dotenv-safe-sedna-electron-cors npm...

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...