Malicious Package

Overview epic-node-ecom-services is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in epic-node-ecom-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c980ee7022fa6e9a11393dc70d2bc61d296757a2ee387a2ad0cefe36fac1d379 The package epic-node-ecom-services was found to contain malicious code...

EUVD-2025-37124

Malicious code in epic-node-ecom-services npm...

MAL-2025-49169 Malicious code in epic-node-ecom-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c980ee7022fa6e9a11393dc70d2bc61d296757a2ee387a2ad0cefe36fac1d379 The package epic-node-ecom-services was found to contain malicious code...

EUVD-2012-1817

Malware in sbrugna...

EUVD-2012-1819

Malware in sbrugna...

EUVD-2012-1818

Malware in sbrugna...

EUVD-2012-1816

Malware in sbrugna...

Malicious code in ecom-cdp (npm)

The package ecom-cdp was found to contain malicious code...

MAL-2025-19188 Malicious code in ecom-cdp (npm)

The package ecom-cdp was found to contain malicious code...

Malicious code in ecom-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521b798d9b0e0109ef6b2642feb49a1c930d97adfa05279b55646931ce1e6352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ecom-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5909 Malicious code in ecom-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521b798d9b0e0109ef6b2642feb49a1c930d97adfa05279b55646931ce1e6352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zyp3_/api-ecom-errors

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2012-1807

Cross-site scripting XSS vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2320 Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8630 Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @lognex/ecom-recommendations

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

ecom.storeykenworthy.com Cross Site Scripting vulnerability OBB-3199547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...