EUVD-2025-178832

Malicious code in framework-writable-dotenv-parse-variables-yonder npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114369

Malicious code in dotenv-parse-variables-yonder-readable-vega npm...

EUVD-2025-123168

Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint npm...

EUVD-2025-114385

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

EUVD-2025-122135

Malicious code in sedna-promise-dotenv-parse-variables-vega npm...

EUVD-2025-113701

Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...

EUVD-2025-113901

Malicious code in eslint-config-quito-spectron-webdriver-dotenv-parse-variables npm...

EUVD-2025-114395

Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

EUVD-2025-116595

Malicious code in apollo-elara-dotenv-parse-variables-charon npm...

Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...