Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123772

Malicious code in phoebe-dotenv-parse-variables-command-tool npm...

Malicious code in phoebe-dotenv-safe-markdown-init (npm)

The package phoebe-dotenv-safe-markdown-init was found to contain malicious code...

MAL-2025-29136 Malicious code in phoebe-dotenv-safe-markdown-init (npm)

The package phoebe-dotenv-safe-markdown-init was found to contain malicious code...