Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2026/09/06 11:36 p.m.•4 views

Malicious code in ecto-spirit (npm)

Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:36 p.m.•6 views

Malicious code in ecto-spirit-core (npm)

Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/12 2:32 p.m.•27 views

Malicious code in ecto-spirit-win-k4n8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082c12f69dfbb45e83017fa0baf4f88f9500649dd443e80f2d7d4f858020814 The package ships a postinstall.js that imports childprocess and references HTTP GET and hostname operations. Without traced-code corroboration of ho...

6AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/06/12 2:32 p.m.•21 views

MAL-2026-5691 Malicious code in ecto-spirit-win-k4n8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8082c12f69dfbb45e83017fa0baf4f88f9500649dd443e80f2d7d4f858020814 The package ships a postinstall.js that imports childprocess and references HTTP GET and hostname operations. Without traced-code corroboration of ho...

6.2AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/12 2:32 p.m.•29 views

Malicious Package

Overview ecto-spirit-win-k4n8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/12 2:32 p.m.•3 views

Malware in ecto-spirit-win-k4n8

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/24 3:43 p.m.•25 views

Malicious code in ecto-spirit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code...

5.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/03/24 3:43 p.m.•16 views

MAL-2026-2355 Malicious code in ecto-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code...

5.8AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/03/24 3:43 p.m.•16 views

MAL-2026-2356 Malicious code in ecto-spirit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629 The package ecto-spirit-core was found to contain malicious code...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/24 3:43 p.m.•35 views

Malicious code in ecto-spirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b836667ecfcf9ebf94ca27412a66b50088c2e6dcfffde861a901c2c3fd5678 The package ecto-spirit was found to contain malicious code...

5.9AI score
SaveExploits0
Rows per page
Query Builder