MAL-2026-16448 Malicious code in debounce-throttle-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2799630960bce0578627557c1a8c41369d2a1556f9632d6491903f17f21d7a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

MAL-2026-16447 Malicious code in caphsmgiwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9097447a7359110650f7119fc6b9265bba96bea6a4814d5534e6cf4a4bd59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16460 Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kamafhbnowct (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646021a6b47fafd23415f7357b91660f4ce18545fa5f9b2ba370842c632fb92d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tib2jcvowuyma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7dad69d2e0593c1c42f8b0e905a0b002d30bccf9ea14d59f2da6ac313c1a48 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in mob4zchvuine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22c6a37f547c13e9444268b7cf9484c580ec5e15d5e6a1207bdcdfc7be2ff35 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in caphsmgiwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9097447a7359110650f7119fc6b9265bba96bea6a4814d5534e6cf4a4bd59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2020-17453

Badges License MIT Installation Install CVE-2020-17453 with npm root@kitploit: npm install cve-2020-17453 -g Usage Example for single url root@kitploit: CVE-2020-17453 -u http://example.com Usage Example for list of urls...

safe-npm

safe-npm A security-focused npm installer that protects your projects from newly compromised packages. Why does this exist? Supply chain attacks on npm packages are a growing threat. Attackers sometimes compromise legitimate packages by: Stealing maintainer credentials Publishing malicious update...

npm ansi_up v4 - Cross-Site Scripting

npm package ansiup v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks. id: CVE-2021-3377 info: name: npm ansiup v4 - Cross-Site Scripting author: geeknik severity: medium description: npm package ansiup v4 is vulnerable to cross-site scripting...

Netmask NPM Package - Server-Side Request Forgery

Netmask NPM Package is susceptible to server-side request forgery because of improper input validation of octal strings in netmask npm package. This allows unauthenticated remote attackers to perform indeterminate SSRF, remote file inclusion, and local file inclusion attacks on many of the...

np-audit

np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and...

MAL-2026-16434 Malicious code in catplatebarcodeparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189a06b0d55d6dab795bcb9ba3a97aa855b2556a54e85e15adc9f5bf20399976 [email protected] declares preinstall and postinstall lifecycle scripts that execute scripts/run.js on npm install. That script reads...

MAL-2026-16437 Malicious code in eslint-plugin-i18n-shreddit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22687900b0decfe83eda7516ec5c5169401894c98be27d115e5dffe64fc902 [email protected] ships no ESLint plugin code; the tarball's only function is a postinstall hook scripts.postinstall = 'node index.j...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation 这是针对 CVE-2021-21315 的概念验证，该漏洞影响 Node.JS 的系统信息库（npm 包 "systeminformation"）。npmjs.com/systeminformation "务必检查或清理传递给 si.inetLatency、si.inetChecksite、si.services、si.processLoad 等服务参数……仅允许字符串，拒绝任何数组。字符串清理如预期正常工作。" 由于该漏洞说明不够清晰（依我之见），我决定基于有漏洞版本的 systeminformation 编写一个小应用...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...