EUVD-2025-179263

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...

EUVD-2025-179896

Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...

EUVD-2025-180461

Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...

EUVD-2025-175548

Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...

EUVD-2025-176871

Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...

EUVD-2025-176346

Malicious code in slides-install-dynamo-dotenv-parse-variables npm...

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178832

Malicious code in framework-writable-dotenv-parse-variables-yonder npm...

MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116336

Malicious code in avior-dotenv-parse-variables-pegasus-meissa npm...

EUVD-2025-122561

Malicious code in rest-publish-algol-dotenv-parse-variables npm...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

EUVD-2025-121612

Malicious code in stream-dotenv-parse-variables-izar-antares npm...

EUVD-2025-111876

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...

EUVD-2025-121877

Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...