Lucene search
+L

3 matches found

OSV
OSV
added 2025/07/06 2:40 p.m.2 views

MAL-2025-5646 Malicious code in corplogger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bcb9f25864b2367cfc6d8ca1e691663a9f768c407c747273e385a74ce2d4fa Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/06 2:40 p.m.3 views

Malicious code in corplogger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bcb9f25864b2367cfc6d8ca1e691663a9f768c407c747273e385a74ce2d4fa Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
Snyk
Snyk
added 2022/09/08 11:24 a.m.1 views

Malicious Package

Overview corplogger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder