EUVD-2025-114394

Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-116336

Malicious code in avior-dotenv-parse-variables-pegasus-meissa npm...

EUVD-2025-122488

Malicious code in rigel-magellan-dotenv-parse-variables-mensa npm...

EUVD-2025-124384

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables npm...

EUVD-2025-113308

Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-115186

Malicious code in command-sirius-request-dotenv-parse-variables npm...

Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112346

Malicious code in izar-virgo-library-dotenv-parse-variables npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-114370

Malicious code in dotenv-parse-variables-yonder-flare-indus npm...

EUVD-2025-122659

Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115504

Malicious code in chai-protractor-dotenv-parse-variables-native npm...

EUVD-2025-115161

Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...

Malicious code in dotenv-parse-variables-despina-helios-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121868

Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables npm...

EUVD-2025-123326

Malicious code in procyon-hyperion-dotenv-parse-variables-blaze npm...

EUVD-2025-111876

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...