Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/12 12:31 a.m.•4 views

Malicious code in cr-bot-common (npm)

Source: amazon-inspector ddd83408820ca65c51cea223a061260109332ba408ca3a43ba00ef827f1ad74f preinstall.js and postinstall.js execute automatically on npm install. preinstall.js reads.env files from the current and parent directories, walks the working directory and home directory for files matching...

6AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/11 10:39 p.m.•15 views

MAL-2026-16137 Malicious code in cr-bot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd83408820ca65c51cea223a061260109332ba408ca3a43ba00ef827f1ad74f preinstall.js and postinstall.js execute automatically on npm install. preinstall.js reads.env files from the current and parent directories, walks t...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/11 10:39 p.m.•35 views

Malicious code in cr-bot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd83408820ca65c51cea223a061260109332ba408ca3a43ba00ef827f1ad74f preinstall.js and postinstall.js execute automatically on npm install. preinstall.js reads.env files from the current and parent directories, walks t...

5.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/07/27 10:59 p.m.•12 views

Malicious Package

Overview cr-bot-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.7AI score
SaveExploits0References2
Rows per page
Query Builder