EUVD-2025-115186

Malicious code in command-sirius-request-dotenv-parse-variables npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-114385

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...

EUVD-2025-114372

Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...

EUVD-2025-121909

Malicious code in soap-cross-env-dotenv-parse-variables-stop npm...

MAL-2025-141720 Malicious code in dotenv-parse-variables-eris-xenon-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86edc8c541c695f39d29c03f34576642818fa92016bddc5c0a451a0593bcaff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-113308

Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...

EUVD-2025-114353

Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables npm...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

EUVD-2025-112210

Malicious code in jekyll-elektra-vortex-dotenv-parse-variables npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-115119

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables npm...

EUVD-2025-115253

Malicious code in colors-neptune-dotenv-parse-variables-impulse npm...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114400

Malicious code in dotenv-parse-variables-axios-rimraf-socketio npm...

EUVD-2025-113458

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables npm...

EUVD-2025-113474

Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...

EUVD-2025-123982

Malicious code in package-lyra-postgres-dotenv-parse-variables npm...