Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•5 views

Malicious code in events-alias (npm)

Source: amazon-inspector 164642716a755117674746c1c2534b0ac47d56bed2348e7a800c3d37a98074e9 The package's preinstall hook "node index.js" runs automatically on npm install and executes an exfiltration payload. index.js requires childprocess, os, http, and https, collects the installer's hostname,...

6AI score
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/08 5:31 p.m.•40 views

Malicious code in events-alias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164642716a755117674746c1c2534b0ac47d56bed2348e7a800c3d37a98074e9 The package's preinstall hook "node index.js" runs automatically on npm install and executes an exfiltration payload. index.js requires childprocess,...

6AI score
SaveExploits0References1
Rows per page
Query Builder