Lucene search
+L

267881 matches found

Snyk
Snyk
•added 2026/07/26 12:25 p.m.•14 views

Malicious Package

Overview @akunsansan0/biru13 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/26 12:25 p.m.•5 views

Malicious code in @agent-link/agent (npm)

Source: amazon-inspector b3a178213d6597e731a313e9ec92f5b2afb8b955e3205500fa67ff6dc1ca989c The package spawns a local PTY /bin/bash on POSIX, powershell.exe on Windows via node-pty and wires it to a WebSocket connection that defaults to wss://msclaude.ai. In dist/connection.js, frames of type...

6.2AI score
SaveExploits0References45Affected Software1
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•18 views

Malicious Package

Overview @0xlr/clerk-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•16 views

Malicious Package

Overview 3lectron is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•17 views

Malicious Package

Overview 2023-free-spins-coin-master-dsdzldz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•22 views

Malicious Package

Overview 2bd0pk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•17 views

Malicious Package

Overview 2023-coin-master-free-spins-zzdezb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•17 views

Malicious Package

Overview 24712-pl4712 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•16 views

Malicious Package

Overview 3scnd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•18 views

Malicious Package

Overview 2023-fortnite-free-v-bucks-and-skins-updated-dklzd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•19 views

Malicious Package

Overview 2hvogw is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•16 views

Malicious Package

Overview 2023-coin-master-free-spins-working-codes-efje is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•17 views

Malicious Package

Overview 202512jeet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•16 views

Malicious Package

Overview 12341241234124124124324t is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•16 views

Malicious Package

Overview 13500-free-vbucks-fortnite-klhykgf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/26 12:25 p.m.•5 views

Malicious code in 1cat-tunnel-client-zx (npm)

Source: amazon-inspector 796f1b18c13a38088b4e48d75575eb92b23af5d91cdfaf6a82717f0fabbc7a79 On npm install, the package's postinstall hook node install.js fetches a platform-specific executable from http://156.226.174.161:8888/binaries/tunnel-client- over plaintext HTTP, writes it to the package's...

6.1AI score
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•23 views

Malicious Package

Overview 01-0redi7qgbz0uv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•18 views

Malicious Package

Overview 0xmisoke is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/26 12:25 p.m.•15 views

Malicious Package

Overview 0xegg2024 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/25 9:45 p.m.•51 views

Malicious code in @ks-radar/radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe5f14a06be3c24f9b771e8bbe33139614129069d276962f0c7e019fd89cbce On npm install, the package's preinstall lifecycle script preinstall.js reads a hex-encoded command string from preinstall.json, decodes it via...

5.6AI score
SaveExploits0References3
Rows per page
Query Builder