2 matches found
MAL-2026-2074 Malicious code in @emilgroup/discount-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1865498ea5a64d42e7c20006c28291248357d4b6526192d3f3064d2c5e68263 No a static rule matches and no traced-code findings were produced for this package version. The scanned contents show no lifecycle-hook execution, n...
5.6AI score
SaveExploits0References5
Embedded Malicious Code
Overview @emilgroup/discount-sdk is an A new version of the package Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM...
9.8CVSS5.8AI score
SaveExploits0References2
20