EUVD-2025-121720

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

EUVD-2025-113701

Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...

EUVD-2025-123168

Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint npm...

EUVD-2025-113901

Malicious code in eslint-config-quito-spectron-webdriver-dotenv-parse-variables npm...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114381

Malicious code in dotenv-parse-variables-nightmare-aether-run-script npm...

MAL-2025-145719 Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396e04392f9a76bac22dee614f1bfcbcd3cbf55bd09109b9d581980e115ba151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145702 Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1154cbe9c318d29f837435506ab9c0a77e01862465e6de0a19988d4800b301f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

EUVD-2025-115108

Malicious code in concurrently-apex-promise-dotenv-parse-variables npm...

Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115294

Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...

EUVD-2025-114378

Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...

EUVD-2025-112573

Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...

EUVD-2025-116278

Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...

EUVD-2025-123825

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus npm...