Lucene search
+L

6 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-16451 Malicious code in calk (npm)

The package calk was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in calk (npm)

The package calk was found to contain malicious code...

7AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.2 views

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2020/09/02 8:23 p.m.3 views

bismagul_project08_quiz (>=1.0.0, <=1.0.1), cli-advanture-game (1.0.0) +5 more potentially affected by unknown CVE via calk (0.0.1-security)

calk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on calk and may be impacted: - bismagulproject08quiz =1.0.0, =1.0.0, =1.0.0, =1.0.1 - todoterminallist 1.0.0 - zhs-cli-advanture-game 1.0.0 Source cves: unknown CVE Source...

5.4AI score
SaveExploits0
OSV
OSV
added 2020/09/02 8:23 p.m.14 views

GHSA-9MMW-3FMH-96G3 Malicious Package in calk

All versions of calk typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/02 8:23 p.m.28 views

Malicious Package in calk

All versions of calk typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.7AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder