136 matches found
Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124384
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...
EUVD-2025-112346
Malicious code in izar-virgo-library-dotenv-parse-variables npm...
EUVD-2025-114394
Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...
EUVD-2025-115186
Malicious code in command-sirius-request-dotenv-parse-variables npm...
EUVD-2025-114370
Malicious code in dotenv-parse-variables-yonder-flare-indus npm...
EUVD-2025-115294
Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...
MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114377
Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...
MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114372
Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...
EUVD-2025-114382
Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...
EUVD-2025-114371
Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...
EUVD-2025-113458
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...
EUVD-2025-114692
Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112210
Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...