MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...

MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)

The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...

MAL-2025-34575 Malicious code in taurus-dotenv-safe-bionics-hugo (npm)

The package taurus-dotenv-safe-bionics-hugo was found to contain malicious code...

MAL-2025-18657 Malicious code in dotenv-cosmos-taurus-kinetic (npm)

The package dotenv-cosmos-taurus-kinetic was found to contain malicious code...

MAL-2025-18668 Malicious code in dotenv-safe-kastra-atlas-perturbation (npm)

The package dotenv-safe-kastra-atlas-perturbation was found to contain malicious code...

MAL-2025-15989 Malicious code in bootstrap-jabbah-blackhole-dotenv-safe (npm)

The package bootstrap-jabbah-blackhole-dotenv-safe was found to contain malicious code...

MAL-2025-31703 Malicious code in rate-limiter-joviology-apex-dotenv-safe (npm)

The package rate-limiter-joviology-apex-dotenv-safe was found to contain malicious code...

MAL-2025-18663 Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...

MAL-2025-16552 Malicious code in carina-cluster-dotenv-eslint-plugin (npm)

The package carina-cluster-dotenv-eslint-plugin was found to contain malicious code...

MAL-2025-18673 Malicious code in dotenv-safe-winston-dotenv-safe-markdown-pdf (npm)

The package dotenv-safe-winston-dotenv-safe-markdown-pdf was found to contain malicious code...

MAL-2025-18659 Malicious code in dotenv-foundation-perseus-version (npm)

The package dotenv-foundation-perseus-version was found to contain malicious code...

MAL-2025-18666 Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm)

The package dotenv-safe-auriga-cz-conventional-changelog-castor was found to contain malicious code...

Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5550 Malicious code in dotenv-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 983b0b06a5013d619d699ddcdaf39ce8118a63537d7243760571684111b2c921 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3882 Malicious code in dotenv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503db890e3fc82d35cc6de9ca072e67dd6c86e450fa82780fdac9dba5db59167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotenv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503db890e3fc82d35cc6de9ca072e67dd6c86e450fa82780fdac9dba5db59167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-QWP8-X4FF-5H87 ZX Allows Environment Variable Injection for dotenv API

Impact This vulnerability is an Environment Variable Injection issue in dotenv.stringify, affecting google/zx version 8.3.1. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or...

UBUNTU-CVE-2025-24959

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...

CVE-2025-24959 Environment Variable Injection for dotenv API in zx

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...

CVE-2025-24959 Environment Variable Injection for dotenv API in zx

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...