Lucene search
K

6 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-17408 Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2020/09/02 3:48 p.m.12 views

GHSA-2HQF-QQMQ-PGPP Malicious Package in commander-js

All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script. Recommendatio...

9.8CVSS7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/02 3:48 p.m.23 views

Malicious Package in commander-js

All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script. Recommendatio...

3.3AI score
Exploits0References2Affected Software1
Node.js
Node.js
added 2019/01/09 10:0 p.m.7 views

Malicious Package

Overview All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script...

6.8AI score
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.71 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.3AI score0.17051EPSS
Exploits4References99
Rows per page
Query Builder