Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/11 5:54 a.m.•8 views

Malicious code in crew-toolbox (npm)

The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/09/11 5:54 a.m.•0 views

Malware in crew-toolbox

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2025/09/11 5:54 a.m.•10 views

Malicious Package

Overview crew-toolbox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
•added 2025/09/11 5:54 a.m.•7 views

MAL-2025-47056 Malicious code in crew-toolbox (npm)

The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder