EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

EUVD-2025-122561

Malicious code in rest-publish-algol-dotenv-parse-variables npm...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

EUVD-2025-115938

Malicious code in buffer-oberon-dotenv-parse-variables-async npm...

EUVD-2025-123168

Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint npm...

EUVD-2025-124219

Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...

EUVD-2025-114376

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

EUVD-2025-115253

Malicious code in colors-neptune-dotenv-parse-variables-impulse npm...

EUVD-2025-114395

Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...

EUVD-2025-124202

Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...

EUVD-2025-112210

Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...

MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141715 Malicious code in dotenv-parse-variables-dactyl-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553918f29ad698a225d2b077fc60b1d34a4522e23490977aae6619892944fad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139393 Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121957

Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf npm...

EUVD-2025-114397

Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...

EUVD-2025-116336

Malicious code in avior-dotenv-parse-variables-pegasus-meissa npm...

EUVD-2025-121877

Malicious code in socketio-dotenv-parse-variables-phoenix-chalk npm...