Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/05 6:32 p.m.•1 views

Malicious code in devplatform-vite-plugin-external (npm)

Source: amazon-inspector 7a591855b5f44a53d20e6258728aeb5c0254fb10dac285f579fffcfc97608061 The package's main entry index.js unconditionally requires./setup on load. setup.js selects an OS/arch-specific endpoint and downloads a binary from a rotating list of Cloudflare Workers hosts...

6.2AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:05 p.m.•45 views

Malicious code in devplatform-vite-plugin-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a591855b5f44a53d20e6258728aeb5c0254fb10dac285f579fffcfc97608061 The package's main entry index.js unconditionally requires./setup on load. setup.js selects an OS/arch-specific endpoint and downloads a binary from ...

6.2AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/05 3:05 p.m.•3 views

Malware in devplatform-vite-plugin-external

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•19 views

Malicious Package

Overview devplatform-vite-plugin-external is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.4AI score
SaveExploits0References2
Rows per page
Query Builder