Lucene search
+L

6 matches found

osv_mal
osv_mal
•added 2026/08/26 2:19 p.m.•13 views

MAL-2026-14538 Malicious code in spotify-url-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd the...

5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/26 2:19 p.m.•23 views

Malicious code in spotify-url-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd the...

5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/25 2:10 p.m.•22 views

Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

5.5AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/08/25 2:10 p.m.•13 views

MAL-2026-14492 Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/25 8:27 a.m.•24 views

Malicious code in spotify-url-resolovela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f6315c9b94537e8f2ba85260ccc147a6fdf9ab19336609d10e9819db575045 On require/import of the package's main index.js, a top-level startBackupLoop call runs immediately and reschedules every 60 minutes. It archives the...

5.4AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/08/25 8:27 a.m.•13 views

MAL-2026-14487 Malicious code in spotify-url-resolovela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f6315c9b94537e8f2ba85260ccc147a6fdf9ab19336609d10e9819db575045 On require/import of the package's main index.js, a top-level startBackupLoop call runs immediately and reschedules every 60 minutes. It archives the...

5.5AI score
SaveExploits0References1
Rows per page
Query Builder