Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/24 6:31 p.m.•6 views

Malicious code in consumerweb-serverutils (npm)

Source: amazon-inspector 04473d8096a27ae1cbf94652a0087dcf00762f2c7d1ef390bb351f283e743349 consumerweb-serverutils 3.4.3 runs a preinstall lifecycle script that on npm install collects the installer's username, hostname, and current working directory, walks up the directory tree to read the...

5.8AI score
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 4:45 p.m.•29 views

Malicious code in consumerweb-serverutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04473d8096a27ae1cbf94652a0087dcf00762f2c7d1ef390bb351f283e743349 consumerweb-serverutils 3.4.3 runs a preinstall lifecycle script that on npm install collects the installer's username, hostname, and current working...

5.5AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/08/24 4:45 p.m.•27 views

MAL-2026-14428 Malicious code in consumerweb-serverutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04473d8096a27ae1cbf94652a0087dcf00762f2c7d1ef390bb351f283e743349 consumerweb-serverutils 3.4.3 runs a preinstall lifecycle script that on npm install collects the installer's username, hostname, and current working...

5.6AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/08/24 6:30 a.m.•15 views

Malicious Package

Overview consumerweb-serverutils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder