MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111956

Malicious code in kaus-umbra-dotenv-safe-version npm...

EUVD-2025-114959

Malicious code in corvus-dotenv-safe-uninstall-babel npm...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114329

Malicious code in dotenv-safe-ultra-lacerta-cors npm...

Malicious code in kaus-umbra-dotenv-safe-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7c8de543f5e9ad796c6b27d6f2de5bb8f1d974f1f4ee10a094e731139c606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115289

Malicious code in cluster-auth0-json-dotenv-safe npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-116595

Malicious code in apollo-elara-dotenv-parse-variables-charon npm...

EUVD-2025-123472

Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

MAL-2025-146883 Malicious code in pyxis-mysql-dotenv-safe-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5988490b8f2fb96a314f256df9f876d0532b41261f9c1cb297cefb81f1d69354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111163

Malicious code in middleware-dotenv-pegasus-mensa npm...

EUVD-2025-114349

Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer npm...

EUVD-2025-112573

Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...

MAL-2025-145892 Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113286

Malicious code in ganymede-uglify-js-quark-dotenv npm...

MAL-2025-141766 Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...