Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2025/11/24 9:41 p.m.•5 views

Malware in composite-reducer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:41 p.m.•15 views

Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References10
osv_mal
osv_mal
•added 2025/11/24 9:41 p.m.•15 views

MAL-2025-190951 Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References10
EUVD
EUVD
•added 2025/11/24 9:41 p.m.•9 views

EUVD-2025-199092

Malicious code in composite-reducer npm...

6.6AI score
SaveExploits0References1
Rows per page
Query Builder