@wethenorth12/env-loader

MAL-2026-12091

npmmalware8/5/2026

Description

Malicious code in @wethenorth12/env-loader (npm)

Indicators of Compromise

SHA256 Hashes (1)

de45cab34c84d02c802689caf5a6683df75d402bb17239fea95b395860942ac9

References (1)

https://www.npmjs.com/package/@wethenorth12/env-loader/v/4.2.0OSV

Details

Ecosystemnpm

Attack Typemalware

Published8/5/2026

Quick Actions

All Incidents npm Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001