EUVD-2025-116217

Malicious code in backend-dotenv-adonis-webdriver-manager npm...

EUVD-2025-123211

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-113181

Malicious code in global-dotenv-safe-mysql-mira npm...

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-111621

Malicious code in local-prompts-webdriver-mocha-dotenv-safe npm...

Malicious code in public-kastra-odin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1ea1c041c1cc3c6f30b1c651a7cceface3a61fba53a9e639fdd1c11ed1ec79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114595

Malicious code in delphinus-dotenv-safe-dagda-antares npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

EUVD-2025-122512

Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables npm...

EUVD-2025-114353

Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...

EUVD-2025-113139

Malicious code in google-xerxes-dotenv-safe-jabbah npm...

EUVD-2025-123897

Malicious code in pegasus-dotenv-safe-build-wolf npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

Malicious code in buffer-transport-dotenv-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d83035ce63668bd4eb199426469192d2492c2d5e513bc731b0d837d9e29673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115108

Malicious code in concurrently-apex-promise-dotenv-parse-variables npm...

EUVD-2025-112113

Malicious code in jsonp-lint-meissa-dotenv-safe npm...

EUVD-2025-115929

Malicious code in buffer-transport-dotenv-thuban npm...