Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 6:27 a.m.23 views

Malicious code in backupsitetuff10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8062677ad6aa536c8e4582df43db6251e78e0cd2a0e4c36348a997bc28b06d5b The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

6.2AI score
SaveExploits0References3
Snyk
Snyk
added 2026/06/01 9:0 p.m.12 views

Malicious Package

Overview backupsitetuff10 is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder