Lucene search
+L

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in asynnc (npm)

The package asynnc was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-14997 Malicious code in asynnc (npm)

The package asynnc was found to contain malicious code...

7.2AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/02 6:35 p.m.•22 views

GHSA-5FM9-JMV7-FCX5 Malicious Package in asynnc

All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:35 p.m.•38 views

Malicious Package in asynnc

All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

4AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•1 views

PT-2020-21060

Name of the Vulnerable Software and Affected Versions asynnc versions affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a...

9.8CVSS5.9AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/05/06 2:03 p.m.•21 views

Malicious Package

Overview All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder