EUVD-2025-178183

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...

EUVD-2025-179007

Malicious code in event-bootes-dotenv-parse-variables-ursa npm...

EUVD-2025-177114

Malicious code in polaris-build-event-dotenv-parse-variables npm...

EUVD-2025-179090

Malicious code in epsilon-protected-reject-parse-benchmark npm...

EUVD-2025-178493

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax npm...

EUVD-2025-179266

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse npm...

EUVD-2025-177713

Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy npm...

EUVD-2025-177790

Malicious code in mock-parse-earth-export-hot npm...

EUVD-2025-179209

Malicious code in easy-parse-async-xi-analyze npm...

EUVD-2025-177318

Malicious code in parse-kappa-void-proxy-scale npm...

MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190094 Malicious code in upsilon-parse-module-virtualize-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a440b3c8b3c00cc296b78fcc754858117fc974f54cf17d0173de5b6c412031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178587

Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer npm...

MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178139

Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables npm...

MAL-2025-188169 Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180263

Malicious code in async-parse-compile-sanitize-quick npm...

EUVD-2025-176871

Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...

EUVD-2025-179115

Malicious code in enum-parse-protected-kernel-refactor npm...

MAL-2025-188564 Malicious code in parse-kappa-void-proxy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...