Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•22 views

Malicious Package

Overview datetime-toolkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/11 7:23 a.m.•33 views

Malicious code in datetime-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc38777296d43cff21c9e56d16208c8925c6dc25b5dec4227823da94096433d The package presents itself as a lightweight datetime utility but its main entry datetime.js invokes collect from ./index.js at top level, so any...

5.5AI score
SaveExploits0References9
Rows per page
Query Builder