EUVD-2025-114372

Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

EUVD-2025-112958

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables npm...

EUVD-2025-120445

Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

EUVD-2025-114375

Malicious code in dotenv-parse-variables-proxima-mongodb-got npm...

EUVD-2025-114381

Malicious code in dotenv-parse-variables-nightmare-aether-run-script npm...

EUVD-2025-112928

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown npm...

EUVD-2025-114380

Malicious code in dotenv-parse-variables-ora-aquarius-markdown npm...

EUVD-2025-112573

Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...

EUVD-2025-121720

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...

EUVD-2025-122330

Malicious code in sagitta-dotenv-parse-variables-sedna-mutation npm...

EUVD-2025-124384

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...

EUVD-2025-120259

Malicious code in xenon-xenos-sadr-dotenv-parse-variables npm...

EUVD-2025-116595

Malicious code in apollo-elara-dotenv-parse-variables-charon npm...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113901

Malicious code in eslint-config-quito-spectron-webdriver-dotenv-parse-variables npm...

EUVD-2025-111876

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...

EUVD-2025-112285

Malicious code in janus-private-phoebe-dotenv-parse-variables npm...