
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
π Securely collect and manage missing .env variables via encrypted CLI surveys.
CryEnv is a CLI tool that helps teams securely collect missing environment variables by creating interactive encrypted surveys.
With CryEnv, you can:
.env
file.β
Fast.
π Secure.
π οΈ Easy to use.
CryEnv is designed with security and privacy in mind. Hereβs how data is handled:
node-fetch
and a private server at webto.pro.No installation required! Just use npx:
npx cryenv
This will guide you through creating an encrypted survey for missing environment variables.
To fill a survey:
npx cryenv --fill YOUR_TOKEN
To import responses into your .env
file:
npx cryenv --import YOUR_TOKEN --path=.env
1οΈβ£ Create a survey with missing .env
keys.
2οΈβ£ Share the generated token with a teammate.
3οΈβ£ The recipient fills the survey via CLI.
4οΈβ£ Responses are securely encrypted β only you can decrypt them.
5οΈβ£ Import the responses directly into your .env
file.
π All data remains private & secure β even CryEnv cannot read the responses.
You can install CryEnv globally:
npm install -g cryenv
Now you can use it without npx
:
cryenv
Automatically scan your .env.example
or another file:
npx cryenv --env .env.example
This will create a survey with all missing variables.
npx cryenv
You'll be guided through an interactive setup.
If someone shares a CryEnv token with you, fill it like this:
npx cryenv --fill YOUR_TOKEN
You'll be prompted to enter values.
npx cryenv --import YOUR_TOKEN --path=.env
This will decrypt responses and add them to your .env
file.
npx cryenv --restore FILE
Useful if you need to re-import or review responses.
β All responses are encrypted.
β Only the survey creator can decrypt responses.
β Survey tokens never expose raw data.
β No external servers are used β works fully offline.
Imagine you're working on a team project. Some environment variables are missing, and you need your teammate to fill them securely.
You create a survey and get a unique token:
npx cryenv --env .env.example
You share the token with a teammate:
npx cryenv --fill YOUR_TOKEN
They fill the survey without seeing other values.
You import their encrypted responses into .env
:
npx cryenv --import YOUR_TOKEN --path=.env
π Done! Your .env
file is now complete β securely.
CryEnv is licensed under the MIT License.
Β© 2025 Unbywyd.
πΉ NPM: CryEnv on NPM
πΉ GitHub: CryEnv Repository
πΉ Issues: Report a bug
Need more features? Open an issue or contribute on GitHub! π
FAQs
π Securely collect and manage missing .env variables via encrypted CLI surveys.
The npm package cryenv receives a total of 12 weekly downloads. As such, cryenv popularity was classified as not popular.
We found that cryenv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last weekβs supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.