dotenv-cli-node

MAL-2026-1710

npmmalware3/18/2026
Description

Malicious code in dotenv-cli-node (npm)

Indicators of Compromise
SHA256 Hashes (2)
2b19cb30c02228173e0072ae436ce1d5e0c2f6eb6f9f7fa08755075813d6d63f
914751db31692fb4c83c9e8e3e2fed123b349d261368499b9caf33dc411b62cd
Details
Ecosystemnpm
Attack Typemalware
Published3/18/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001