Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/30 6:31 a.m.•16 views

Malicious Package

Overview dotenv-preflight is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/29 1:51 p.m.•34 views

Malicious code in dotenv-preflight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e18dd97225f3e61274667a66297cee2224f99b7c3915e5a5f138028f5d0dd0 The npm package [email protected] presents itself as a dotenv-related preflight utility but ships a single index.js whose contents are heavily...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/29 1:51 p.m.•23 views

MAL-2026-17324 Malicious code in dotenv-preflight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e18dd97225f3e61274667a66297cee2224f99b7c3915e5a5f138028f5d0dd0 The npm package [email protected] presents itself as a dotenv-related preflight utility but ships a single index.js whose contents are heavily...

6AI score
SaveExploits0References1
Rows per page
Query Builder