Malicious code in express-self-destruct (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0097503a7ecd7b5e3b97213de29b36d5e957a305f7829cc45f43aa5aa3da817 On npm install, the package's postinstall hook node scripts/inject.js walks up from the install directory to locate the consumer's project root and...

vulnerable-node-app

This is an educational sandbox demonstrating common web applicat...

Exploit for CVE-2025-27210

This is a PoC exploit for CVE-2025-27210, a vulnerability in a N...

MAL-2022-2230 Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in create-ot-express-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...