EUVD-2025-113458

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...

EUVD-2025-114394

Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

EUVD-2025-122561

Malicious code in rest-publish-algol-dotenv-parse-variables npm...

EUVD-2025-114369

Malicious code in dotenv-parse-variables-yonder-readable-vega npm...

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111680

Malicious code in lint-centaurus-vuetify-dotenv-parse-variables npm...

EUVD-2025-113701

Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...

EUVD-2025-115504

Malicious code in chai-protractor-dotenv-parse-variables-native npm...

EUVD-2025-114382

Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-114692

Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...