2 matches found
MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123772
Malicious code in phoebe-dotenv-parse-variables-command-tool npm...