Threats Tagged 'mal-2026-10631'
View all threats tagged with 'mal-2026-10631'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-10631'
Click on any threat for detailed analysis and mitigation recommendations
MAL-2026-10631: Malicious code in core-dotenv (npm) 0 The core-dotenv npm package version 1.4.1 contains malicious code that fetches and executes remote code from an obfuscated URL. When the package's config() or get() functions are called, it issues an HTTPS request to a hidden host, retrieves JSON data, and executes the 'parser' field as code with full Node.js capabilities. This behavior is unrelated to legitimate dotenv functionality and allows remote code execution on the host using the package. Join the discussion | GCVE Database | 07/15/2026, 04:01:05 UTC Added: 07/15/2026, 12:37:15 UTC |
Showing 1 to 1 of 1 result