Lucene search
+L

2 matches found

Snyk
Snyk
added 2026/06/09 2:17 p.m.15 views

Malicious Package

Overview @doaction/signalhub is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/09 2:17 p.m.22 views

Malicious code in @doaction/signalhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bca1eff18553fad58ccd2097810887a61afc717b44a657c6674bfa7317bb41 @doaction/[email protected] is shaped as a dependency-confusion attack against organizations using a private @doaction scope. package.json declares...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder