Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/27 10:59 p.m.•9 views

Malicious Package

Overview faust-cont is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.7AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•4 views

Malicious code in faust-cont (npm)

The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...

6.3AI score
SaveExploits0References5Affected Software1
osv_mal
osv_mal
•added 2026/07/21 12:00 a.m.•33 views

MAL-2026-11042 Malicious code in faust-cont (npm)

The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...

6.1AI score
SaveExploits0References2
Rows per page
Query Builder