9168 matches found
EUVD-2025-179162
Malicious code in emulate-catch-file-mu-parse npm...
EUVD-2025-179263
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...
EUVD-2025-175957
Malicious code in thread-compile-parse-decrypt-air npm...
EUVD-2025-177317
Malicious code in parse-key-lambda-new-socket npm...
EUVD-2025-177316
Malicious code in parse-rho-wind-compress-simple npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-177037
Malicious code in process-simulate-parse-integer-wind npm...
EUVD-2025-176694
Malicious code in report-good-error-user-parse npm...
EUVD-2025-179708
Malicious code in cloud-star-parse-fork-sandbox npm...
EUVD-2025-176470
Malicious code in sed-shell-cat-encrypt-parse npm...
EUVD-2025-176725
Malicious code in reject-report-water-thread-parse npm...
Malicious code in parse-kappa-void-proxy-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175781
Malicious code in upsilon-parse-module-virtualize-sandbox npm...
EUVD-2025-179267
Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...
EUVD-2025-176221
Malicious code in star-permission-parse-assert-small npm...
EUVD-2025-177319
Malicious code in parse-array-slow-emulate-notify npm...
MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...