EUVD-2025-112346

Malicious code in izar-virgo-library-dotenv-parse-variables npm...

EUVD-2025-113308

Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...

EUVD-2025-115863

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat npm...

EUVD-2025-111794

Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd npm...

EUVD-2025-114384

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy npm...

EUVD-2025-114386

Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...

EUVD-2025-114393

Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...

EUVD-2025-114382

Malicious code in dotenv-parse-variables-nashira-hapi-iota npm...

EUVD-2025-114391

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework npm...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114394

Malicious code in dotenv-parse-variables-dactyl-hermes-spinner npm...

EUVD-2025-123286

Malicious code in promise-delphinus-dotenv-parse-variables-ursa npm...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-120463

Malicious code in wezen-rehype-redis-dotenv-parse-variables npm...

EUVD-2025-124202

Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo npm...

EUVD-2025-123472

Malicious code in postgres-spinner-titan-dotenv-parse-variables npm...

EUVD-2025-121957

Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf npm...

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...