7464 matches found
Malicious code in dotenv-parse-variables-despina-helios-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b18f97386bd3801ef7412aeef0d1251cf070f9cc633a408bae11d7719e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115119
Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...
EUVD-2025-115058
Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-122512
Malicious code in reveal-md-ganymede-chromedriver-dotenv-parse-variables npm...
EUVD-2025-114353
Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...
EUVD-2025-115161
Malicious code in commitizen-ultra-event-dotenv-parse-variables npm...
EUVD-2025-114254
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables npm...
EUVD-2025-114378
Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...
EUVD-2025-115294
Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...
EUVD-2025-123472
Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...
EUVD-2025-111794
Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd npm...
EUVD-2025-112573
Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...
EUVD-2025-116336
Malicious code in avior-dotenv-parse-variables-pegasus-meissa npm...
MAL-2025-143540 Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112393
Malicious code in iota-dotenv-parse-variables-envconfig-mdx npm...
Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111876
Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap npm...