dotnetenv

MAL-2025-192320

npmmalware12/5/2025
Description

Malicious code in dotnetenv (npm)

Indicators of Compromise
SHA256 Hashes (4)
1de4b94766b2d429c31b5469528ed35738f14af710e091dbd47b838649173953
ad45bf9bd262cf43bb28421d876fa019b6f14d3699854454ae1677b0383a90a2
ffa3ef316fb26547451e1565718de5feafb112a35350f9e5043daaaa81e03fb9
245449ddea5a5e4922be3b4c438da2379f765f4c56e123bcc49befa054ecc244
References (3)
https://github.com/advisories/GHSA-vphr-fmcc-hxf9OSVhttps://security.snyk.io/vuln/SNYK-JS-DOTNETENV-14188258OSVhttps://npmjs.com/package/dotnetenvOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/5/2025
Aliases
GHSA-vphr-fmcc-hxf9SNYK-JS-DOTNETENV-14188258
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001