EUVD-2025-114369

Malicious code in dotenv-parse-variables-yonder-readable-vega npm...

EUVD-2025-122135

Malicious code in sedna-promise-dotenv-parse-variables-vega npm...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112958

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...

EUVD-2025-116709

Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...

EUVD-2025-116626

Malicious code in apex-dotenv-parse-variables-wezen-ora npm...

EUVD-2025-114381

Malicious code in dotenv-parse-variables-nightmare-aether-run-script npm...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...

EUVD-2025-122512

Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables npm...

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...