Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:53 p.m.•15 views

Malicious code in easypanel-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 10:53 p.m.•9 views

Malware in easypanel-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2025/11/24 10:53 p.m.•24 views

MAL-2025-191085 Malicious code in easypanel-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...

6.8AI score
SaveExploits0References4
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•18 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder