failIncident: Malware

Scanned:

env-loader-cli

Artifact:

latest

removed

malicious

Research

Load environment variables from .env, JSON, YAML, and cloud sources

License: unknown

Published:

See on PyPI

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

No known vulnerabilities detected

Hardening

No application hardening issues

Threats

Tampering

1 suspicious application behaviors

Malware

2 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware

Reported By: Community (Socket)

More info

malware

Reported By: Community (kam193)

More info

malware

Reported By: Community (OpenSSF)

More info

malware

Reported By: ReversingLabs (Researcher)

Learn more about malware detection

removal

Reported By: Community

Overview issues8 vulnerabilities0 malware2 behaviors25 dependencies0 contributors1 versions2

List of detected malware threats.

Threat name

Count

Description

Trojan.SupplyChain

2 on components

A trojan is a type of malicious software designed to deceive users by appearing legitimate while carrying out harmful activities in the background. Named after the Trojan horse from Greek mythology, trojans rely on social engineering, email attachments, deceptive advertisements, and drive-by downloads to infiltrate systems. Unlike malware with a single function, trojans often combine multiple capabilities, such as remote access, keylogging, and data theft. As a result, the term trojan is often used as a broad classification for malware with diverse functionalities.

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

env-loader-cli

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: about 2 months agoVersion: 0.1.1

INCIDENTS FOR THIS VERSION:

Did you know...