136 matches found
EUVD-2025-115938
Malicious code in buffer-oberon-dotenv-parse-variables-async npm...
EUVD-2025-114386
Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...
EUVD-2025-114395
Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...
EUVD-2025-123949
Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...
EUVD-2025-116626
Malicious code in apex-dotenv-parse-variables-wezen-ora npm...
EUVD-2025-114385
Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...
EUVD-2025-113901
Malicious code in eslint-config-quito-spectron-webdriver-dotenv-parse-variables npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123982
Malicious code in package-lyra-postgres-dotenv-parse-variables npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112958
Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...
EUVD-2025-121909
Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...
EUVD-2025-114369
Malicious code in dotenv-parse-variables-yonder-readable-vega npm...
EUVD-2025-113701
Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...