Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/28 12:42 p.m.•4 views

Malicious code in date-sanitize-helper (npm)

Source: ossf-package-analysis 0ad5bc011fffec78eedbae93d69fa652c21868e6a8492f3c4a34cdb08dffd6e1 The OpenSSF Package Analysis project identified 'date-sanitize-helper' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2026/07/28 12:42 p.m.•20 views

Malicious Package

Overview date-sanitize-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/28 7:15 a.m.•22 views

MAL-2026-11106 Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/28 7:15 a.m.•37 views

Malicious code in date-sanitize-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder