Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•22 views

Malicious Package

Overview @epic-common/observability-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•7 views

Malicious code in @epic-common/observability-node (npm)

Source: amazon-inspector 73d7457ccefffe2de1f0464f21ac2eadfb981be593d2b34ceb0d5cde1174da0b Package targets the private @epic-common scope Epic Games and is published to the public npm registry as a dependency-confusion vehicle. On import of the./api subpath, top-level code enumerates all process.e...

6.1AI score
SaveExploits0References6Affected Software1
Rows per page
Query Builder