dotevn

{"modified":"2025-12-02T09:12:13Z","published":"2025-09-05T16:38:20Z","schema_version":"1.7.4","id":"MAL-2025-44063","aliases":["SNYK-JS-DOTEVN-13561253"],"summary":"Malicious code in dotevn (npm)","details":"The package dotevn was found to contain malicious code.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n","affected":[{"package":{"ecosystem":"npm","name":"dotevn"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["17.2.1"]}],"references":[{"type":"ADVISORY","url":"https://security.snyk.io/vuln/SNYK-JS-DOTEVN-13561253"},{"type":"ARTICLE","url":"https://socket.dev/blog/north-korea-contagious-interview-campaign-338-malicious-npm-packages"}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"reversing-labs","sha256":"efa0c2d8cfbc42b24a9912b6c0df7a6eb6a5b2774a18b194e47679c84821eef7","import_time":"2025-09-26T11:05:50.877165511Z","id":"RLMA-2025-04989","modified_time":"2025-09-26T09:29:08Z","versions":["17.2.1"]},{"source":"reversing-labs","sha256":"738480b98885c0854f054d3aec0d950ac5b6a291556a3b29ed2215467f14a2c4","import_time":"2025-12-02T09:10:03.308315066Z","id":"RLUA-2025-05769","modified_time":"2025-12-01T13:08:55Z"}]}}