185 matches found
EUVD-2025-124384
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...
EUVD-2025-124219
Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...
EUVD-2025-124202
Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...
EUVD-2025-123949
Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...
EUVD-2025-113701
Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121868
Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...
MAL-2025-143540 Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114370
Malicious code in dotenv-parse-variables-yonder-flare-indus npm...
EUVD-2025-114397
Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...
EUVD-2025-114394
Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...
EUVD-2025-121909
Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...
EUVD-2025-114375
Malicious code in dotenv-parse-variables-proxima-mongodb-got npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112958
Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...
MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...