2 matches found
Malicious code in dotenv-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d22963a1f1fabe3a8b3f54efcb5053761d385486093200765745297ac2bd16 The package impersonates the dotenv API but on module load and again when the bundled CLI runs invokes a function named dispatchAnalytics in...
6.4AI score
SaveExploits0References2
MAL-2026-17504 Malicious code in dotenv-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d22963a1f1fabe3a8b3f54efcb5053761d385486093200765745297ac2bd16 The package impersonates the dotenv API but on module load and again when the bundled CLI runs invokes a function named dispatchAnalytics in...
6.4AI score
SaveExploits0References2
20