Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/17 3:11 a.m.15 views

Malicious code in @mastra/duckdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4754e9321d534c89f59052bd2ca5ce38c6d3916eba9a5e0990e0186c7beac14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2025/09/09 8:45 p.m.6 views

Embedded Malicious Code

Overview duckdb is a Node.js API for DuckDB, the "SQLite for Analytics". The API for this client is somewhat compliant to the SQLite Node.js client for easier transition and transition you must eventually. Affected versions of this package are vulnerable to Embedded Malicious Code. This package...

9.8CVSS6.8AI score0.00344EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/08 2:26 p.m.3 views

Embedded Malicious Code

Overview duckdb is a Node.js API for DuckDB, the "SQLite for Analytics". The API for this client is somewhat compliant to the SQLite Node.js client for easier transition and transition you must eventually. Affected versions of this package are vulnerable to Embedded Malicious Code. This package...

9.8CVSS7AI score
SaveExploits0References2
Rows per page
Query Builder