Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/16 9:30 a.m.•6 views

Malicious code in @prime0/inimatch (npm)

Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host fingerprint hostname, username, platform/arch, cwd, node versio...

6.2AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/16 9:30 a.m.•18 views

Malicious Package

Overview @prime0/inimatch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/16 6:27 a.m.•38 views

Malicious code in @prime0/inimatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/16 6:27 a.m.•20 views

MAL-2026-16205 Malicious code in @prime0/inimatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d094698410f0146ad3f51ff8860d657ca28b5f55b77ef9593b637b956996180f @prime0/inimatch is a typosquat of minimatch that behaves as a stealth remote-access agent. postinstall.js runs on npm install and POSTs a host...

6AI score
SaveExploits0References1
Rows per page
Query Builder