Lucene search
+L

4 matches found

Mend
Mend
•added 2026/05/15 12:47 a.m.•2 views

WS-2022-0114

The package 'epic-ue-loading' in NPM is malicious. The package was uploaded first time in April 18th 2022. All versions are malicious. The malicious package is exfiltrating user information like env variables and sends it out via a pipe-dream webhook. The package seems to target consumers of...

10CVSS5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2022/07/27 9:44 a.m.•12 views

MAL-2022-2771 Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/07/27 9:44 a.m.•5 views

Malware in epic-ue-loading

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/07/27 9:44 a.m.•5 views

Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder