Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/08/07 3:33 p.m.•4 views

Malicious code in big-tss (npm)

Source: amazon-inspector 022f32d17f1b3fa4c33727aa2309fe4e75706c842ac04b25a48738fdb9aa3d2b [email protected] impersonates the popular big.js arbitrary-precision math library and ships upstream big.js source with an injected block at the top of the main module: try const doc = require"npm-doc-dev";...

6.3AI score
SaveExploits0References5Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/07 2:35 p.m.•55 views

Malicious code in big-tss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022f32d17f1b3fa4c33727aa2309fe4e75706c842ac04b25a48738fdb9aa3d2b [email protected] impersonates the popular big.js arbitrary-precision math library and ships upstream big.js source with an injected block at the top of...

5.6AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/08/07 2:35 p.m.•33 views

MAL-2026-13613 Malicious code in big-tss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022f32d17f1b3fa4c33727aa2309fe4e75706c842ac04b25a48738fdb9aa3d2b [email protected] impersonates the popular big.js arbitrary-precision math library and ships upstream big.js source with an injected block at the top of...

5.7AI score
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/08/06 12:31 a.m.•9 views

big-tss (5.0.5) potentially affected by unknown CVE via npm-dc-dev (1.1.1)

npm-dc-dev NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on npm-dc-dev and may be impacted: - big-tss 5.0.5 Source cves: unknown CVE Source advisory: GHSA-C8P8-HX32-6Q2R...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/05 9:31 p.m.•22 views

big-tss (5.0.5) potentially affected by unknown CVE via npm-dc-dev (1.1.1)

npm-dc-dev NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on npm-dc-dev and may be impacted: - big-tss 5.0.5 Source cves: unknown CVE Source advisory: SNYK:JS-NPMDCDEV-18565244...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/05 9:16 p.m.•21 views

big-tss (5.0.5) potentially affected by unknown CVE via npm-dc-dev (1.1.1)

npm-dc-dev NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on npm-dc-dev and may be impacted: - big-tss 5.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13378...

5.8AI score
SaveExploits0
Rows per page
Query Builder