7312 matches found
EUVD-2025-177037
Malicious code in process-simulate-parse-integer-wind npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-175875
Malicious code in triton-proxima-impulse-dotenv-parse-variables npm...
EUVD-2025-175957
Malicious code in thread-compile-parse-decrypt-air npm...
EUVD-2025-176346
Malicious code in slides-install-dynamo-dotenv-parse-variables npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-178139
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...
EUVD-2025-175548
Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...
Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175848
Malicious code in uglify-parse-socket-new-error npm...
EUVD-2025-175486
Malicious code in xi-abstract-user-alert-parse npm...
EUVD-2025-176871
Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...
EUVD-2025-177713
Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy npm...
EUVD-2025-177790
Malicious code in mock-parse-earth-export-hot npm...
EUVD-2025-179162
Malicious code in emulate-catch-file-mu-parse npm...
EUVD-2025-175920
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...
EUVD-2025-178183
Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...
Malicious code in scale-parse-await-book-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf23bd6ac11aee950532e019d12d27aef2b746a2fcd39db0eafe766558432d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...