npm

gulp-inject-envs@1.2.2

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 2:44 PM UTC

Malicious

OSV ID

MAL-2025-191105

Ecosystem

npm

Summary

The package gulp-inject-envs was found to contain malicious code.

Source: amazon-inspector (d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.