Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/29 3:31 a.m.•6 views

Malicious code in eth-pino (npm)

Source: amazon-inspector 81e08c035ca41519f1d57d389027befac80a8ee8405612825b633967db5fb8c1 On require, lib/initializeCaller.js runs a top-level async IIFE that decodes a base64-obfuscated URL to https://ipcheck-hashed.vercel.app/api/auth/6c1d60d35852ef0c05df and POSTs a shallow copy of process.env...

6.5AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/08/29 3:31 a.m.•17 views

Malicious Package

Overview eth-pino is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/08/29 2:13 a.m.•27 views

MAL-2026-15554 Malicious code in eth-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e08c035ca41519f1d57d389027befac80a8ee8405612825b633967db5fb8c1 On require, lib/initializeCaller.js runs a top-level async IIFE that decodes a base64-obfuscated URL to...

6.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/29 2:13 a.m.•45 views

Malicious code in eth-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e08c035ca41519f1d57d389027befac80a8ee8405612825b633967db5fb8c1 On require, lib/initializeCaller.js runs a top-level async IIFE that decodes a base64-obfuscated URL to...

6.3AI score
SaveExploits0References1
Rows per page
Query Builder