Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/18 3:30 a.m.•7 views

Malicious code in blue-string-formatter-utils (npm)

Source: amazon-inspector aa3c9f5edcc636fc8d38e40a6bb225aed8f6b638be31f2abf8b6e747212c9565 The package advertises itself as 'Utility helpers for string formatting' but its shipped main file performs a single behavior: an XMLHttpRequest GET to the protocol-relative URL //xss.report/c/k3rne111 whose...

6.3AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/18 3:30 a.m.•15 views

Malicious Package

Overview blue-string-formatter-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/17 11:19 p.m.•37 views

Malicious code in blue-string-formatter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3c9f5edcc636fc8d38e40a6bb225aed8f6b638be31f2abf8b6e747212c9565 The package advertises itself as 'Utility helpers for string formatting' but its shipped main file performs a single behavior: an XMLHttpRequest GET ...

6.2AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/17 11:19 p.m.•18 views

MAL-2026-16273 Malicious code in blue-string-formatter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3c9f5edcc636fc8d38e40a6bb225aed8f6b638be31f2abf8b6e747212c9565 The package advertises itself as 'Utility helpers for string formatting' but its shipped main file performs a single behavior: an XMLHttpRequest GET ...

6.2AI score
SaveExploits0References1
Rows per page
Query Builder