2 matches found
Malicious Package
Overview @epic-common/observability-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
9.8CVSS5.6AI score
SaveExploits0References2
Malicious code in @epic-common/observability-node (npm)
Source: amazon-inspector 73d7457ccefffe2de1f0464f21ac2eadfb981be593d2b34ceb0d5cde1174da0b Package targets the private @epic-common scope Epic Games and is published to the public npm registry as a dependency-confusion vehicle. On import of the./api subpath, top-level code enumerates all process.e...
6.1AI score
SaveExploits0References6Affected Software1
20