EUVD-2025-114369

Malicious code in dotenv-parse-variables-yonder-readable-vega npm...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145719 Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396e04392f9a76bac22dee614f1bfcbcd3cbf55bd09109b9d581980e115ba151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145702 Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1154cbe9c318d29f837435506ab9c0a77e01862465e6de0a19988d4800b301f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

EUVD-2025-124384

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

EUVD-2025-114353

Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

EUVD-2025-114254

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables npm...

EUVD-2025-114378

Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...

EUVD-2025-115294

Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...

EUVD-2025-116336

Malicious code in avior-dotenv-parse-variables-pegasus-meissa npm...