Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/08/19 6:31 p.m.•6 views

Malicious code in ai-texts-utils (npm)

Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module presents a small plaintext toText/normalizeText helper, then...

6AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/19 5:02 p.m.•43 views

Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

5.6AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/08/19 5:02 p.m.•8 views

Malware in ai-texts-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/08/19 5:02 p.m.•34 views

MAL-2026-14302 Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

5.7AI score
SaveExploits0References5
Snyk
Snyk
•added 2026/08/19 3:15 p.m.•26 views

Malicious Package

Overview ai-texts-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Rows per page
Query Builder