2 matches found
Malicious Package
Overview @kuperka/chainguard-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
9.8CVSS5.4AI score
SaveExploits0References2
MAL-2026-13688 Malicious code in @kuperka/chainguard-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b799ca087f4396cb295cd53012a92d10dea0c763a41c8b85e94437108ea24e4 Package @kuperka/[email protected] exposes a single payload, window.VEIL.init, that on load harvests document.cookie, every...
5.3AI score
SaveExploits0References2
20