Lucene search
+L

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/07 12:31 p.m.•33 views

Malicious code in beaver-ui-popover-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44380c53af51645632593b0a86d93258bb71aecddc88d9ff3487a7906486e559 On require of the package, index.js loads vendor.js which runs a bootstrap routine that rotates through obfuscated Cloudflare Workers hosts...

5.9AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/07 12:31 p.m.•9 views

MAL-2026-13523 Malicious code in beaver-ui-popover-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44380c53af51645632593b0a86d93258bb71aecddc88d9ff3487a7906486e559 On require of the package, index.js loads vendor.js which runs a bootstrap routine that rotates through obfuscated Cloudflare Workers hosts...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:05 p.m.•33 views

Malicious code in beaver-ui-popover-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a6f956dc3e60442172279367aeb7cbfb758a853f844c53b3ff22a972f0bac5 On require'beaver-ui-popover-card', support.js downloads a platform-specific binary from Cloudflare Workers endpoints whose hostnames are assembled a...

5.8AI score
SaveExploits0References2
OSV
OSV
•added 2026/08/05 3:05 p.m.•16 views

MAL-2026-12821 Malicious code in beaver-ui-popover-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a6f956dc3e60442172279367aeb7cbfb758a853f844c53b3ff22a972f0bac5 On require'beaver-ui-popover-card', support.js downloads a platform-specific binary from Cloudflare Workers endpoints whose hostnames are assembled a...

5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•13 views

Malicious Package

Overview beaver-ui-popover-card is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.4AI score
SaveExploits0References2
Rows per page
Query Builder