Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•22 views

Malicious Package

Overview crypto-validate-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•5 views

Malicious code in crypto-validate-lib (npm)

Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaque file masquerading as test data, decodes it to 40KB of...

5.9AI score
SaveExploits0References9Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 1:58 p.m.•42 views

Malicious code in crypto-validate-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8b69cab723043b20a628a6cd17f0e5cc64051004d9beb43d4b9ed58dbd9a0 index.js contains a self-invoking IIFE that, 37 seconds after the module is required, reads a base64 blob from test/fixtures/keypairs.dat a 53KB opaq...

6.1AI score
SaveExploits0References4
Rows per page
Query Builder