Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/22 8:39 p.m.•38 views

Malicious code in encrypt-string-ttak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf72c81030b9346ff3d3dd6f2e5f3395a61d433def25e5e2ea2a7e52a6051999 The package is published as a UniApp 'encryptString' helper but its single shipped module dist/encrypt-string.js is heavily obfuscated obfuscator.io...

5.6AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2026/07/22 8:39 p.m.•21 views

MAL-2026-11011 Malicious code in encrypt-string-ttak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf72c81030b9346ff3d3dd6f2e5f3395a61d433def25e5e2ea2a7e52a6051999 The package is published as a UniApp 'encryptString' helper but its single shipped module dist/encrypt-string.js is heavily obfuscated obfuscator.io...

5.6AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/07/22 8:39 p.m.•3 views

Malware in encrypt-string-ttak

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder