185 matches found
MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143540 Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122331
Malicious code in sagitta-development-deneb-dotenv-parse-variables npm...
EUVD-2025-123286
Malicious code in promise-delphinus-dotenv-parse-variables-ursa npm...
EUVD-2025-114372
Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...
EUVD-2025-114382
Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...
EUVD-2025-114371
Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...
EUVD-2025-113458
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...
EUVD-2025-120571
Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables npm...
EUVD-2025-114692
Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112210
Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...
EUVD-2025-114374
Malicious code in dotenv-parse-variables-readable-dactyl-dorado npm...
EUVD-2025-114380
Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...
EUVD-2025-114376
Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor npm...
EUVD-2025-114397
Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...
EUVD-2025-114388
Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...