3 matches found
Malicious code in datetime-fmt-xutil (npm)
Source: amazon-inspector 7f916f6db3bec145472f71c43358b7e8056efb981041a3b4e9bffe8bbaec9997 The npm package's postinstall.js opens a TCP connection to the hardcoded IP 8.135.48.40 on port 4444 and pipes /bin/sh stdio through the socket, granting interactive shell access on the installer's machine t...
Malicious code in datetime-fmt-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f916f6db3bec145472f71c43358b7e8056efb981041a3b4e9bffe8bbaec9997 The npm package's postinstall.js opens a TCP connection to the hardcoded IP 8.135.48.40 on port 4444 and pipes /bin/sh stdio through the socket,...
MAL-2026-13935 Malicious code in datetime-fmt-xutil (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f916f6db3bec145472f71c43358b7e8056efb981041a3b4e9bffe8bbaec9997 The npm package's postinstall.js opens a TCP connection to the hardcoded IP 8.135.48.40 on port 4444 and pipes /bin/sh stdio through the socket,...