Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/07 6:30 a.m.•7 views

Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.8AI score
SaveExploits0References6Affected Software1
osv_mal
osv_mal
•added 2026/09/07 12:00 a.m.•12 views

MAL-2026-16008 Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/07 12:00 a.m.•37 views

Malicious code in b2b-frontend-external-library (npm)

This package is malicious. It is not a real library. An attacker put it on the public npm registry. The package name is a copy of a private, internal package name. This is a dependency confusion attack. A build that gets the name from public npm installs this package in place of the real one. The...

5.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•15 views

Malicious Package

Overview b2b-frontend-external-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder