Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/28 6:32 p.m.•8 views

Malicious code in app-sim-layer (npm)

Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches scan/block patterns from http://95.216.118.146:3001/api/v1,...

6AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/07/28 6:32 p.m.•19 views

Malicious Package

Overview app-sim-layer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/28 1:29 p.m.•30 views

MAL-2026-11126 Malicious code in app-sim-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches...

6AI score
SaveExploits0References1
Rows per page
Query Builder