8413 matches found
EUVD-2025-120445
Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114369
Malicious code in dotenv-parse-variables-yonder-readable-vega npm...
EUVD-2025-114393
Malicious code in dotenv-parse-variables-deneb-lyra-repository npm...
EUVD-2025-114395
Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...
EUVD-2025-123949
Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...
EUVD-2025-114396
Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...
EUVD-2025-122330
Malicious code in sagitta-dotenv-parse-variables-sedna-mutation npm...
Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116626
Malicious code in apex-dotenv-parse-variables-wezen-ora npm...
EUVD-2025-121909
Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...
EUVD-2025-115938
Malicious code in buffer-oberon-dotenv-parse-variables-async npm...
EUVD-2025-112977
Malicious code in halley-dotenv-parse-variables-hermes-promise npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
EUVD-2025-113701
Malicious code in farout-dotenv-parse-variables-umbriel-promise npm...
EUVD-2025-123982
Malicious code in package-lyra-postgres-dotenv-parse-variables npm...
EUVD-2025-122135
Malicious code in sedna-promise-dotenv-parse-variables-vega npm...
Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...