Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/30 6:31 a.m.•17 views

Malicious Package

Overview dotenv-precheck is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/09/29 2:09 p.m.•23 views

MAL-2026-17304 Malicious code in dotenv-precheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446a8483dbc9e696506f44c6777b7c086b1b919b2585b5e5c99ca5f6e2e19a8e [email protected] is a credential-stealing package disguised as a dotenv preflight utility. package.json wires index.js as a postinstall script, ...

5.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/29 2:09 p.m.•29 views

Malicious code in dotenv-precheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446a8483dbc9e696506f44c6777b7c086b1b919b2585b5e5c99ca5f6e2e19a8e [email protected] is a credential-stealing package disguised as a dotenv preflight utility. package.json wires index.js as a postinstall script, ...

5.9AI score
SaveExploits0References3
Rows per page
Query Builder