Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/25 9:33 p.m.•17 views

Malicious Package

Overview @alphaspace/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/25 2:40 a.m.•32 views

Malicious code in @alphaspace/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d10ba1427af01794dfb0a6b39a05f969547455e9d86d75f18601b1d035c507 preinstall.js runs unconditionally on npm install and POSTs a JSON payload to a hardcoded Pipedream collector at...

5.8AI score
SaveExploits0References4
osv-mal
osv-mal
•added 2026/09/25 2:40 a.m.•19 views

MAL-2026-17169 Malicious code in @alphaspace/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d10ba1427af01794dfb0a6b39a05f969547455e9d86d75f18601b1d035c507 preinstall.js runs unconditionally on npm install and POSTs a JSON payload to a hardcoded Pipedream collector at...

5.8AI score
SaveExploits0References4
Rows per page
Query Builder