Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/09/30 6:31 a.m.•17 views

Malicious Package

Overview fabric-mod-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/30 3:31 a.m.•8 views

Malicious code in fabric-mod-utils (npm)

Source: amazon-inspector b3ada8fa4c11f57f6f8bfcf158b33b56d71f6f1433910b981cec70492b2272a9 The package declares scripts.postinstall = 'node index.js'. On install, index.js performs an HTTPS GET to the hardcoded host fabric-npm.gm-service.xyz at path /p and passes the response body to...

5.8AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/30 1:26 a.m.•21 views

MAL-2026-17307 Malicious code in fabric-mod-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ada8fa4c11f57f6f8bfcf158b33b56d71f6f1433910b981cec70492b2272a9 The package declares scripts.postinstall = 'node index.js'. On install, index.js performs an HTTPS GET to the hardcoded host fabric-npm.gm-service.xy...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/30 1:26 a.m.•28 views

Malicious code in fabric-mod-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ada8fa4c11f57f6f8bfcf158b33b56d71f6f1433910b981cec70492b2272a9 The package declares scripts.postinstall = 'node index.js'. On install, index.js performs an HTTPS GET to the hardcoded host fabric-npm.gm-service.xy...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder