Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/06/20 9:00 p.m.•25 views

Malicious Package

Overview @withgoogle/stitch-sdk is a malicious package. Although this package attempts to impersonate Google's Stitch AI design tool, there is no connection between Google and this package. By squatting the @withgoogle npm scope, a malicious actor published @withgoogle/stitch-sdk in an attempt to...

9.8CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder