Lucene search
+L

10 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 12:48 p.m.•27 views

Malicious code in @zahlen/checkout-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fa3b05e748470cdc08e19b2e86efb8a34c85f155e5972c1b0c0598c150a0bd The package's fesm2022 ESM entry declared as module in package.json and executed on import of the library ends with a trailing evalatob'...' payload...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/04 11:57 p.m.•21 views

Malicious code in webdev-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9577d9f40486af224c5dd365ffbab6a5d45c4a052dfe6de50bc1d8f130d9642a [email protected] is a typosquat of the sindresorhus/pkg-conf library, published under author 'Sinde Sorus' homoglyph of Sindre Sorhus. index.js...

6.3AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/04 11:57 p.m.•11 views

MAL-2026-12005 Malicious code in webdev-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9577d9f40486af224c5dd365ffbab6a5d45c4a052dfe6de50bc1d8f130d9642a [email protected] is a typosquat of the sindresorhus/pkg-conf library, published under author 'Sinde Sorus' homoglyph of Sindre Sorhus. index.js...

6.3AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•4 views

EUVD-2025-32170

Malicious code in bioql PyPI...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/02 2:28 p.m.•17 views

Malicious code in blockscout-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df96f7696839c4588380c2ac801ba26b9a18c28692bfcc3aaabf0e05edd9b8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/10/02 2:28 p.m.•11 views

Malicious Package

Overview blockscout-frontend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
•added 2025/10/02 2:28 p.m.•21 views

MAL-2025-47880 Malicious code in blockscout-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df96f7696839c4588380c2ac801ba26b9a18c28692bfcc3aaabf0e05edd9b8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/10/02 2:28 p.m.•0 views

Malware in blockscout-frontend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•15 views

Malicious code in truffle-plugin-blockscout-verify-jordin (npm)

The package truffle-plugin-blockscout-verify-jordin was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•14 views

MAL-2025-37234 Malicious code in truffle-plugin-blockscout-verify-jordin (npm)

The package truffle-plugin-blockscout-verify-jordin was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder