Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/09/04 6:31 a.m.•13 views

Malicious Package

Overview conversionvaluemanager is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•5 views

Malicious code in conversionvaluemanager (npm)

Source: amazon-inspector 21445a74cc1c4d33c89f1a7d8c357c79d5adb11cda135c813676b23c875418e9 On npm install, postinstall.js automatically runs and gathers installer-identifying data os.hostname, os.userInfo, os.platform, cwd, Node version, timestamp, then sends it as query-string parameters via...

5.9AI score
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/09 5:00 p.m.•42 views

Malicious code in conversionvaluemanager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21445a74cc1c4d33c89f1a7d8c357c79d5adb11cda135c813676b23c875418e9 On npm install, postinstall.js automatically runs and gathers installer-identifying data os.hostname, os.userInfo, os.platform, cwd, Node version,...

6AI score
SaveExploits0References2
Rows per page
Query Builder