Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/06/24 2:08 p.m.•15 views

Malicious Package

Overview date-format-helper2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/23 3:21 p.m.•23 views

Malicious code in date-format-helper2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1775ce65ad47476ee1a0f1c7c5373e61466ec3eb4543cc658e67d2de22960 Package is advertised as a React date-formatting utility, but its postinstall.js performs targeted credential harvesting on npm install. The script...

5.8AI score
SaveExploits0References8
Rows per page
Query Builder