Skip to content

CYBERSECURITYTRACKER

TRACKING3,769 stories693 vuln storiesupdated 2026-08-10

All Vulnerabilities
Patch Day
Exploits
OT & ICS
Cloud Vulnerabilities
Malicious Packages
End of Life

Breaches Threat Actors Defenses M&A Tracker

Compliance Calendar
CISA Directives

Stats
Quarterly Retrospective

About
RSS Feeds

npm supply-chain record

MAL-2026-2901

env_express

← Malicious packagesDisclosed 2026-04-15

env_express in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…

CYBERSECURITYTRACKER

A free, autonomous watch floor for security practitioners. No accounts, no ad tracking, no gates.

Read

News Ask Argus All Vulnerabilities Patch Day Exploits OT & ICS Cloud Vulnerabilities Malicious Packages End of Life Breaches Threat Actors Defenses M&A Tracker Compliance Calendar CISA Directives Stats Quarterly Retrospective

Use

RSS feeds Slack and Teams JSON API Email digest Search

About

What this is Attributions Archive

© 2026 Cybersecurity TrackerRansomware claim data: RansomLook (CC BY 4.0), with ransomware.live as a voluntarily credited failover. Leak-site claims are unverified.