Lucene search
+L

1008 matches found

OSV
OSV
•added 2025/09/15 11:58 p.m.•5 views

GHSA-6JP5-HH4C-8C5H [email protected] contains malware after npm account takeover

Impact On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's own...

8.8CVSS6.7AI score0.00406EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/09/15 11:58 p.m.•24 views

[email protected] contains malware after npm account takeover

Impact On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's own...

8.8CVSS6.6AI score0.00406EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2025/09/15 8:15 p.m.•14 views

CVE-2025-59330

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

8.8CVSS0.00406EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/09/15 7:19 p.m.•3 views

CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

8.8CVSS6.5AI score0.00406EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/09/15 7:19 p.m.•24 views

CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

8.8CVSS0.00406EPSS
SaveExploits0References5
CVE
CVE
•added 2025/09/15 7:19 p.m.•43 views

CVE-2025-59330

The CVE-2025-59330 entry concerns the npm package error-ex . A phishing-driven takeover of its publishing account led to version 1.3.3 containing a malware payload that attempts to redirect cryptocurrency transactions from browser environments (e.g., MetaMask) to attacker addresses. Local/server/...

8.8CVSS6.5AI score0.00406EPSS
SaveExploits0References5
OSV
OSV
•added 2025/09/15 7:19 p.m.•13 views

CVE-2025-59330 [email protected] contains malware after npm account takeover

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

8.8CVSS6.9AI score0.00406EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-59330: Embedded Malicious Code

error-ex allows error subclassing and stack customization. On 8 September 2025, an npm publishing account for error-ex was taken over after a phishing attack. Version 1.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...

8.8CVSS5.8AI score0.00406EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•12 views

node-error-ex 安全漏洞

node-error-ex is a library by Josh Junon Personal Developer. A security vulnerability exists in node-error-ex version 1.3.3, which stems from a phishing attack resulting in an account takeover, and a malicious version that contains a specially crafted payload that could redirect cryptocurrency...

8.8CVSS6.4AI score0.00406EPSS
SaveExploits0References5
OSV
OSV
•added 2025/09/08 3:02 p.m.•10 views

MAL-2025-46975 Malicious code in error-ex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...

8.8CVSS7.1AI score0.00406EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/08 3:02 p.m.•12 views

Malicious code in error-ex (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...

7.1AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•7 views

Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)

The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•10 views

Malicious code in @crabas0npm/ex-iste-optio-sunt (npm)

The package @crabas0npm/ex-iste-optio-sunt was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•3 views

MAL-2025-42786 Malicious code in @teamteanpm2024/ex-consectetur-earum (npm)

The package @teamteanpm2024/ex-consectetur-earum was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•4 views

MAL-2025-42256 Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)

The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•6 views

MAL-2025-42623 Malicious code in @kollorg/ex-doloremque-sint (npm)

The package @kollorg/ex-doloremque-sint was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•8 views

Malicious code in @kollorg/ex-doloremque-sint (npm)

The package @kollorg/ex-doloremque-sint was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•4 views

MAL-2025-42534 Malicious code in @hishpr/eos-iste-ex (npm)

The package @hishpr/eos-iste-ex was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•10 views

Malicious code in @dramateas/sequi-ex-id-sit (npm)

The package @dramateas/sequi-ex-id-sit was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•7 views

Malicious code in @hishpr/eos-iste-ex (npm)

The package @hishpr/eos-iste-ex was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder