MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111876

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...

MAL-2025-143540 Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115186

Malicious code in command-sirius-request-dotenv-parse-variables npm...

MAL-2025-141711 Malicious code in dotenv-parse-variables-callisto-oauth-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb5d62c0d246d9201d77e51324b2e594d0edc2bfeab4f70f8c8bbe9629df860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112573

Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...

EUVD-2025-114371

Malicious code in dotenv-parse-variables-yakutsk-farout-slides npm...

EUVD-2025-114397

Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...

EUVD-2025-115863

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat npm...

EUVD-2025-120571

Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables npm...

EUVD-2025-124205

Malicious code in nuxtjs-typeorm-apollo-dotenv-parse-variables npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114387

Malicious code in dotenv-parse-variables-got-hermes-octans npm...

EUVD-2025-114383

Malicious code in dotenv-parse-variables-module-oauth-magellan npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-124202

Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...