npm package
dotenv-expanded
pkg:npm/dotenv-expanded
Malware
2 malicious versions on record
One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.
- MAL-2026-415Malicious code in dotenv-expanded (npm)Jan 21, 2026
- GHSA-94jw-vmxc-vv4vMalware in dotenv-expandedJan 21, 2026
Vulnerabilities (0)
No CVEs are currently linked to this package.