EUVD-2025-177646

Malicious code in neptunology-husky-dotenv-parse-variables-got npm...

EUVD-2025-179263

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...

EUVD-2025-178493

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...

EUVD-2025-177960

Malicious code in markdown-cors-janus-dotenv-parse-variables npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

EUVD-2025-175920

Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

EUVD-2025-180461

Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...

EUVD-2025-176871

Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...

EUVD-2025-177713

Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy npm...

EUVD-2025-178832

Malicious code in framework-writable-dotenv-parse-variables-yonder npm...

EUVD-2025-175548

Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...

EUVD-2025-175875

Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...

EUVD-2025-180388

Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...

EUVD-2025-176346

Malicious code in slides-install-dynamo-dotenv-parse-variables npm...

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179634

Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...

EUVD-2025-179007

Malicious code in event-bootes-dotenv-parse-variables-ursa npm...

MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177114

Malicious code in polaris-build-event-dotenv-parse-variables npm...