Lucene search
+L

8 matches found

Mend
Mend
•added 2026/05/14 8:18 a.m.•0 views

WS-2019-0406

cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script...

9.8CVSS6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in cage-js (npm)

The package cage-js was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-16429 Malicious code in cage-js (npm)

The package cage-js was found to contain malicious code...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2020/09/03 6:22 p.m.•32 views

Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

2.8AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/03 6:22 p.m.•19 views

GHSA-JF8X-WG7F-P3W8 Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

9.8CVSS7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•3 views

PT-2020-21371

Name of the Vulnerable Software and Affected Versions cage-js versions all Description The issue concerns malicious code in the software that downloads and runs a script from a remote server as a postinstall script. Any computer with this package installed should be considered fully compromised,...

9.8CVSS5.8AI score
SaveExploits0References2
Veracode
Veracode
•added 2019/07/22 6:18 a.m.•13 views

Malicious Package

cage-js is a malicious package. It downloads and runs malicious code from remote server as postinstall script...

6.9AI score
SaveExploits0
nodejs
nodejs
•added 2019/07/19 3:04 p.m.•21 views

Malicious Package

Overview All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that comput...

6.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder