Security Bulletin: Vulnerabilities in Storybook affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Storybook has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-68429 DESCRIPTION:...

Malicious code in node-cli-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7df6bef20ed41b1a5c7e3ca57da4665f799cfcc6d6cf27b6dc87f8fa0560bc The package node-cli-dotenv was found to contain malicious code...

MAL-2026-1802 Malicious code in node-cli-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7df6bef20ed41b1a5c7e3ca57da4665f799cfcc6d6cf27b6dc87f8fa0560bc The package node-cli-dotenv was found to contain malicious code...

MAL-2026-1716 Malicious code in dotenv-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1892dd92715cddb9d2bc58111d6b2e4352677ff4d6b155ed7ddc9e04f06edf The package dotenv-plugin was found to contain malicious code...

Malicious code in dotenv-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1892dd92715cddb9d2bc58111d6b2e4352677ff4d6b155ed7ddc9e04f06edf The package dotenv-plugin was found to contain malicious code...

Malicious code in dotenv-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a15bdceba2f650e2c3d04e2be33994e406c2548812e89a520fc511c2529266 The package dotenv-nodejs was found to contain malicious code...

MAL-2026-1715 Malicious code in dotenv-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a15bdceba2f650e2c3d04e2be33994e406c2548812e89a520fc511c2529266 The package dotenv-nodejs was found to contain malicious code...

Malicious code in dotenv-node-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df463afbbda6fbe8da01a353fbc7c385b9e136cb2315e85b08bf2af29947fe8c The package dotenv-node-promised was found to contain malicious code...

MAL-2026-1714 Malicious code in dotenv-node-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df463afbbda6fbe8da01a353fbc7c385b9e136cb2315e85b08bf2af29947fe8c The package dotenv-node-promised was found to contain malicious code...

MAL-2026-1713 Malicious code in dotenv-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...

Malicious code in dotenv-node-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f6b181cb56922381245597b93fd06147dd83845cd9467098172f6eab07a7c0 The package dotenv-node-cli was found to contain malicious code...

Malicious code in dotenv-mono-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...

MAL-2026-1712 Malicious code in dotenv-mono-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...

Malicious code in dotenv-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff3b8c2dda09766587481490c9be74a1af10a9660698a8f7b8f31a7df47bc96 The package dotenv-int was found to contain malicious code...

MAL-2026-1711 Malicious code in dotenv-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff3b8c2dda09766587481490c9be74a1af10a9660698a8f7b8f31a7df47bc96 The package dotenv-int was found to contain malicious code...

Malicious code in dotenv-cli-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd The package dotenv-cli-node was found to contain malicious code...

MAL-2026-1710 Malicious code in dotenv-cli-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd The package dotenv-cli-node was found to contain malicious code...

`time_calibrators` was removed from crates.io due to malicious code

The timecalibrators crate attempted to exfiltrate .env files to a server that was in turn impersonating the legitimate timeapi.io service. The malicious crate had 1 version published on 2026-03-03 approximately 3 hours before removal and had no evidence of actual downloads. There were no crates...

`time_calibrators` was removed from crates.io due to malicious code

The timecalibrators crate attempted to exfiltrate .env files to a server that was in turn impersonating the legitimate timeapi.io service. The malicious crate had 1 version published on 2026-03-03 approximately 3 hours before removal and had no evidence of actual downloads. There were no crates...

Malicious Package

Overview node-dotenv-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...