Lucene search
+L

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in commqnder (npm)

The package commqnder was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-17435 Malicious code in commqnder (npm)

The package commqnder was found to contain malicious code...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2020/09/11 9:10 p.m.•40 views

Malicious Package in commqnder

All versions of commqnder contain malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

4.6AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/11 12:00 a.m.•2 views

PT-2020-21037

Name of the Vulnerable Software and Affected Versions commqnder versions affected versions not specified Description The issue concerns malicious code in the commqnder package, which is designed to exploit users who make typographical errors when installing modules. Upon installation, the package...

9.8CVSS5.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/06/12 12:00 a.m.•321 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.6AI score0.01455EPSS
SaveExploits4References108
Rows per page
Query Builder