CGSEC researchEvidence-backed corpus findings and retrospective incident analyses from CGSEC.https://cgsec.dev/enRecovering a removed npm malware filehttps://cgsec.dev/research/dotenv-recovery/https://cgsec.dev/research/dotenv-recovery/Recovering @goodjavascript/dotenv@1.0.0 from Software Heritage, checking its identity against jsDelivr, and inspecting its response-to-code execution path.Sun, 04 Oct 2026 00:00:00 GMT