Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2026/09/06 11:36 p.m.•5 views

Malicious code in eact (npm)

The package eact was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•14 views

Malicious code in eact (npm)

The package eact was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•12 views

MAL-2025-19056 Malicious code in eact (npm)

The package eact was found to contain malicious code...

7.2AI score
SaveExploits0
osv_mal
osv_mal
•added 2022/08/19 3:55 a.m.•17 views

MAL-2022-2647 Malicious code in eact-routre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bed76875188926aabac39c85d585ce86cd0387e97781dbe82ab789d02c2ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/08/19 3:55 a.m.•13 views

MAL-2022-2648 Malicious code in eact-transdtion-grouw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddf2ee15692cb3ad61f1aa92a0a0cb6a68ea7eb707c9be262f96c1722f85945 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/08/19 3:55 a.m.•4 views

Malware in eact-transdtion-grouw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/08/19 3:55 a.m.•8 views

Malicious code in eact-routre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bed76875188926aabac39c85d585ce86cd0387e97781dbe82ab789d02c2ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/08/19 3:55 a.m.•8 views

Malicious code in eact-transdtion-grouw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddf2ee15692cb3ad61f1aa92a0a0cb6a68ea7eb707c9be262f96c1722f85945 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/08/19 3:55 a.m.•4 views

Malware in eact-routre

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 8:21 p.m.•36 views

GHSA-PMGV-94F5-6W7W Malicious Package in eact

All versions of eact typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 8:21 p.m.•33 views

Malicious Package in eact

All versions of eact typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.9AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•3 views

PT-2020-21443

Name of the Vulnerable Software and Affected Versions eact affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a remote server...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder