9516 matches found
EUVD-2025-113308
Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...
EUVD-2025-114353
Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...
EUVD-2025-114388
Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...
MAL-2025-145702 Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1154cbe9c318d29f837435506ab9c0a77e01862465e6de0a19988d4800b301f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112210
Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...
EUVD-2025-115119
Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...
EUVD-2025-115253
Malicious code in colors-neptune-dotenv-parse-variables-impulse npm...
Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114400
Malicious code in dotenv-parse-variables-axios-rimraf-socketio npm...
EUVD-2025-113458
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...
EUVD-2025-113474
Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...
EUVD-2025-123982
Malicious code in package-lyra-postgres-dotenv-parse-variables npm...
EUVD-2025-123772
Malicious code in phoebe-dotenv-parse-variables-command-tool npm...
EUVD-2025-116278
Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables npm...
EUVD-2025-114692
Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...
MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122331
Malicious code in sagitta-development-deneb-dotenv-parse-variables npm...
EUVD-2025-115294
Malicious code in cli-ursa-rigel-dotenv-parse-variables npm...