Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/18 3:30 a.m.•15 views

Malicious Package

Overview @railone/image-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/17 7:50 p.m.•24 views

Malicious code in @railone/image-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebec05d8415347cef93849315a26f4221e34efa278fffe1b89700af039246dc6 On import, index.js calls initialize which spawns a detached, stdio-suppressed, windowsHide node loader.js child init.js and records its PID. loader....

6.1AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/17 7:50 p.m.•8 views

MAL-2026-16261 Malicious code in @railone/image-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebec05d8415347cef93849315a26f4221e34efa278fffe1b89700af039246dc6 On import, index.js calls initialize which spawns a detached, stdio-suppressed, windowsHide node loader.js child init.js and records its PID. loader....

6.1AI score
SaveExploits0References1
Rows per page
Query Builder