MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176871

Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...

EUVD-2025-175957

Malicious code in thread-compile-parse-decrypt-air npm...

EUVD-2025-178832

Malicious code in framework-writable-dotenv-parse-variables-yonder npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

EUVD-2025-179265

Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith npm...

EUVD-2025-179266

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse npm...

EUVD-2025-176445

Malicious code in selenium-dotenv-parse-variables-gacrux-vega npm...

EUVD-2025-176694

Malicious code in report-good-error-user-parse npm...

Malicious code in scale-parse-await-book-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf23bd6ac11aee950532e019d12d27aef2b746a2fcd39db0eafe766558432d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177037

Malicious code in process-simulate-parse-integer-wind npm...

EUVD-2025-178183

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...

EUVD-2025-178587

Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...

EUVD-2025-176346

Malicious code in slides-install-dynamo-dotenv-parse-variables npm...

EUVD-2025-180388

Malicious code in apollo-dotenv-parse-variables-stratigraphy-private npm...

Malicious code in sun-serialize-parse-validate-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179209

Malicious code in easy-parse-async-xi-analyze npm...

EUVD-2025-176470

Malicious code in sed-shell-cat-encrypt-parse npm...

MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...