
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@btboy/dotenv
Advanced tools
The package is a zero-dependency module that loads environment variables from files whose name start with .env
:
.env.[process.env.NODE_ENV].local
.env.local
.env.[process.env.NODE_ENV]
.env
The package will read these files, parse data with variable / value, then put into process.env
.
Same variable's name between diferent .env
files will take precedence: .env.[process.env.NODE_ENV].local
> .env.local
> .env.[process.env.NODE_ENV]
> .env
. For Example:
in .env.production.local
DB_SECRET=1234
in .env.local
DB_SECRET=abc
DB_SECRETE=1234
will work.
Let's say that you have set process.env.NODE_ENV = "development"
, and then this package will read .env.development.local
, .env.local
, .env.development
, .env
one by one, ingore files which not exist, parse every line to key/value, join into one map, and put into process.env
.
$ npm install -i @btboy/dotenv
import initEnv from "@btboy/dotenv";
initEnv({});
Default: process.cwd()
You may specify a custom path your .env
files. the module will find them here.
initEnv({cwd: process.cwd()});
Default: false
You may turn on logging to help debug why certain keys or values are not being set as you expect.
initEnv({Debug: true });
Default: utf8
You may specify the encoding of your file containing environment variables.
initEnv({encoding: `utf8` });
FAQs
Loads environment variables from files whose name start with .env
We found that @btboy/dotenv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.