Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 6:31 a.m.•4 views

Malicious code in etoro-billing (npm)

Source: amazon-inspector 3c1ceae274b450706288722b9f6c049114593ef2671de93ac58c4fd4a7318c9a On npm install, the package's preinstall lifecycle hook executes preinstall.js, which reads os.hostname, os.userInfo.username, and process.cwd and issues an HTTP GET to...

5.9AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/10 4:43 a.m.•19 views

MAL-2026-16115 Malicious code in etoro-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1ceae274b450706288722b9f6c049114593ef2671de93ac58c4fd4a7318c9a On npm install, the package's preinstall lifecycle hook executes preinstall.js, which reads os.hostname, os.userInfo.username, and process.cwd and...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/10 4:43 a.m.•39 views

Malicious code in etoro-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1ceae274b450706288722b9f6c049114593ef2671de93ac58c4fd4a7318c9a On npm install, the package's preinstall lifecycle hook executes preinstall.js, which reads os.hostname, os.userInfo.username, and process.cwd and...

5.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/10 12:30 a.m.•15 views

Malicious Package

Overview etoro-billing is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the etoro-billing...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder