Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2242116
AlmaLinux
5975
Alpaquita
16176
Alpine
4655
Android
3708
Azure Linux
17971
BellSoft Hardened Containers
770
Bitnami
9501
Chainguard
1048512
CleanStart
5235
CRAN
14
crates.io
2763
Debian
68991
Echo
7849
GHC
3
GIT
109057
GitHub Actions
55
Go
9330
Hackage
33
Hex
365
Julia
1713
Linux
29975
Mageia
6237
Maven
7050
MinimOS
148636
npm
229216
NuGet
1869
opam
29
openEuler
8900
openSUSE
14647
OSS-Fuzz
4019
Packagist
7101
Pub
11
PyPI
25465
Red Hat
23535
Rocky Linux
4343
Root
19643
RubyGems
5369
SUSE
23455
SwiftURL
60
TuxCare
9965
Ubuntu
66087
VSCode
21
Wolfi
293807
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-17504
npm/dotenv-async
Malicious code in dotenv-async (npm)
23 hours ago
No fix available
MAL-2026-17505
npm/dotenv-promises
Malicious code in dotenv-promises (npm)
23 hours ago
No fix available
MAL-2026-17305
npm/esm-dotenv
Malicious code in esm-dotenv (npm)
5 days ago
No fix available
MAL-2026-17304
npm/dotenv-precheck
Malicious code in dotenv-precheck (npm)
6 days ago
No fix available
MAL-2026-17324
npm/dotenv-preflight
Malicious code in dotenv-preflight (npm)
6 days ago
No fix available
MAL-2026-17231
npm/dotenv-native
Malicious code in dotenv-native (npm)
28 Sep
No fix available
MAL-2026-14316
npm/expect-dotenv
Malicious code in expect-dotenv (npm)
20 Aug
No fix available
MAL-2026-11212
npm/@goodjavascript/dotenv
Malicious code in @goodjavascript/dotenv (npm)
30 Jul
No fix available
MAL-2026-11281
npm/dotenv-core
Malicious code in dotenv-core (npm)
30 Jul
No fix available
MAL-2026-11209
npm/@dotconf-pro/dotenv
Malicious code in @dotconf-pro/dotenv (npm)
30 Jul
No fix available
MAL-2026-10631
npm/core-dotenv
Malicious code in core-dotenv (npm)
15 Jul
No fix available
MAL-2026-6820
npm/express-dotenv
Malicious code in express-dotenv (npm)
06 Jul
No fix available
MAL-2026-4728
npm/web-dotenv
Malicious code in web-dotenv (npm)
25 May
No fix available
MAL-2026-4467
npm/@weirdorg/dotenv
Malicious code in @weirdorg/dotenv (npm)
20 May
No fix available
MAL-2026-2900
npm/dotenv-pack
Malicious code in dotenv-pack (npm)
15 Apr
No fix available
MAL-2026-2220
npm/@universeorg/dotenv
Malicious code in @universeorg/dotenv (npm)
26 Mar
No fix available
Load more...
npm - OSV