Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/31 9:59 p.m.•20 views

Malicious Package

Overview chaos-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/31 9:59 p.m.•23 views

MAL-2026-11458 Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21d36cc80c620f92695d98b05bcfc786a623e64b18b1394f2c85064fc44fb53 lib/report.js imports childprocess, fs, os, and https and, via execSync plus fs.readFileSync calls, collects host identifiers os.hostname, os.userInf...

5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/31 9:59 p.m.•30 views

Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21d36cc80c620f92695d98b05bcfc786a623e64b18b1394f2c85064fc44fb53 lib/report.js imports childprocess, fs, os, and https and, via execSync plus fs.readFileSync calls, collects host identifiers os.hostname, os.userInf...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder