Lucene search
+L

2 matches found

Snyk
Snyk
added 2022/06/23 9:24 a.m.3 views

Malicious Package

Overview angieslist-gulp-build-tasks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

9.8CVSS7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/05/16 6:46 a.m.4 views

Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder