Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•26 views

Malicious Package

Overview env-threads is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.5AI score
SaveExploits0References2
OSV
OSV
•added 2026/05/14 7:24 p.m.•18 views

MAL-2026-3759 Malicious code in env-threads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb511e0bf06367ec0341939aa68ee55859344c6ca6cb8d9f55f7e62cdcc8656 Package env-threads impersonates the legitimate dotenv package: its README, repository URL git://github.com/motdotla/dotenv.git, homepage, descriptio...

6.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/14 7:24 p.m.•27 views

Malicious code in env-threads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb511e0bf06367ec0341939aa68ee55859344c6ca6cb8d9f55f7e62cdcc8656 Package env-threads impersonates the legitimate dotenv package: its README, repository URL git://github.com/motdotla/dotenv.git, homepage, descriptio...

6.3AI score
SaveExploits0References1
Rows per page
Query Builder