2 matches found
Malicious Package
Overview express-validates is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
9.8CVSS5.8AI score
SaveExploits0References2
MAL-2026-6059 Malicious code in express-validates (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664bb6a50d7278e22231a68d44872634603c698fff31d31e787c86a3291603db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
5.4AI score
SaveExploits0References1
20