MAL-2025-188564 Malicious code in parse-kappa-void-proxy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176212

Malicious code in static-transpile-sanitize-emulate-parse npm...

EUVD-2025-176725

Malicious code in reject-report-water-thread-parse npm...

EUVD-2025-179266

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse npm...

EUVD-2025-179162

Malicious code in emulate-catch-file-mu-parse npm...

EUVD-2025-179263

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...

EUVD-2025-177318

Malicious code in parse-kappa-void-proxy-scale npm...

EUVD-2025-179896

Malicious code in callisto-enif-cryonics-dotenv-parse-variables npm...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

EUVD-2025-179209

Malicious code in easy-parse-async-xi-analyze npm...

EUVD-2025-179115

Malicious code in enum-parse-protected-kernel-refactor npm...

EUVD-2025-178183

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...

EUVD-2025-177646

Malicious code in neptunology-husky-dotenv-parse-variables-got npm...

Malicious code in sun-serialize-parse-validate-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176694

Malicious code in report-good-error-user-parse npm...

MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...

EUVD-2025-180461

Malicious code in algol-apollo-dotenv-parse-variables-browserify npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

EUVD-2025-175548

Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...