Lucene search
+L

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/14 4:41 a.m.•30 views

Malicious code in @biz44/process-runtime-utils (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/12 1:51 p.m.•10 views

MAL-2026-16166 Malicious code in @biz44/id12-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/12 1:51 p.m.•34 views

Malicious code in @biz44/id12-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
OSV
OSV
•added 2026/09/12 8:03 a.m.•11 views

MAL-2026-16167 Malicious code in @biz44/id44-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/12 8:03 a.m.•30 views

Malicious code in @biz44/id44-client (npm)

This package is part of a malicious npm campaign published by the biz44 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and implemen...

5.7AI score
SaveExploits0
Rows per page
Query Builder