6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

Malicious code in comander (npm)

The package comander was found to contain malicious code. --- Credit: OpenSSF source...

Malicious Package

Overview comander-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview comander-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in comander-cli (npm)

Source: amazon-inspector 8296169da90107eec2a24127137eacf4a47dfca0c780111705aa542c3159d626 comander-cli is a typosquat of the popular 'commander' package whose index.js exports an empty object, providing no advertised functionality. All behavior is in scripts/postinstall.js, which runs automatical...

Malicious code in comander-lib (npm)

Source: amazon-inspector 19734d8bfb929b0c1049b6220271fabaa91603506cdcb6424e67988519da9a6e [email protected] is a typosquat of commander with an empty index.js and no native sources. Its scripts/postinstall.js runs automatically on npm install and performs two hostile actions. First, it POSTs the...

MAL-2026-14171 Malicious code in comander-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19734d8bfb929b0c1049b6220271fabaa91603506cdcb6424e67988519da9a6e [email protected] is a typosquat of commander with an empty index.js and no native sources. Its scripts/postinstall.js runs automatically on npm...

Malicious code in comander-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19734d8bfb929b0c1049b6220271fabaa91603506cdcb6424e67988519da9a6e [email protected] is a typosquat of commander with an empty index.js and no native sources. Its scripts/postinstall.js runs automatically on npm...

Malicious code in comander-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8296169da90107eec2a24127137eacf4a47dfca0c780111705aa542c3159d626 comander-cli is a typosquat of the popular 'commander' package whose index.js exports an empty object, providing no advertised functionality. All...

MAL-2026-14170 Malicious code in comander-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8296169da90107eec2a24127137eacf4a47dfca0c780111705aa542c3159d626 comander-cli is a typosquat of the popular 'commander' package whose index.js exports an empty object, providing no advertised functionality. All...

6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

MAL-2025-17378 Malicious code in comander (npm)

The package comander was found to contain malicious code...

Malicious code in comander (npm)

The package comander was found to contain malicious code...

Malware in comnader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

Malicious Package in comander

All versions of comander contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

GHSA-4XG9-G7QJ-JHG4 Malicious Package in comander

All versions of comander contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

6_0901 (1.0.0), @alu0101227610/gh-repo-rename (>=1.2.0, <=1.2.1) +27 more potentially affected by unknown CVE via comander (0.0.1-security)

comander NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on comander and may be impacted: - 60901 1.0.0 - @alu0101227610/gh-repo-rename =1.2.0, =1.1.1, =1.2.0, =0.0.2, =1.0.0, =1.2.2, =1.0.1, =1.0.5 - hager1 1.0.0 and more Sourc...

PT-2020-21036

Name of the Vulnerable Software and Affected Versions comander versions affected versions not specified Description The issue concerns malicious code in the comander package, which is designed to exploit users' typing mistakes when installing modules. Upon installation, the package attempts to...

Malicious Package

Overview All versions of comander contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package...