Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 6:31 a.m.•6 views

Malicious code in etoro-builders (npm)

Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname, os.userInfo.username, and process.cwd, encodes them into a...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/10 4:45 a.m.•40 views

Malicious code in etoro-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname,...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/10 4:45 a.m.•12 views

MAL-2026-16116 Malicious code in etoro-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9210fb131a2f661ae1d656fa461d45c6c54377179aecba06e6a07b4f357a00b The package's preinstall lifecycle script preinstall.js reads the installer's OS hostname, username, and current working directory via os.hostname,...

5.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/10 12:30 a.m.•13 views

Malicious Package

Overview etoro-builders is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the etoro-builders...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder