MAL-2026-1711

    Dashboard / Malicious Package / MAL-2026-1711

    MAL-2026-1711

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in dotenv-int (npm)

    Details: Source: amazon-inspector (5ff3b8c2dda09766587481490c9be74a1af10a9660698a8f7b8f31a7df47bc96) The package dotenv-int was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: dotenv-int

    Purl: pkg:npm/dotenv-int

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    3.5.5
    MAL-2026-1711 | CVE-DB