185 matches found
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-175920
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...
EUVD-2025-175548
Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...
EUVD-2025-177114
Malicious code in polaris-build-event-dotenv-parse-variables npm...
EUVD-2025-177097
Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv npm...
EUVD-2025-177646
Malicious code in neptunology-husky-dotenv-parse-variables-got npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
MAL-2025-188169 Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179896
Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...
MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177711
Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...
EUVD-2025-179264
Malicious code in dotenv-parse-variables-init-child-process-genomics npm...
EUVD-2025-176871
Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...
EUVD-2025-178493
Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180461
Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...