Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•2 views

Malicious code in eslint-plugin-fuel-react (npm)

Source: amazon-inspector 99675eb06a245907c7a2133cf7d75af3037229a059d0a135bf8c3d518432a6a4 The package eslint-plugin-fuel-react was found to contain malicious code. Source: ossf-package-analysis 7d529d0ab1e104b0efc7fe5f691e984d58e2f5b08fc910ed462ba8be72b852e9 The OpenSSF Package Analysis project...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/22 12:31 a.m.•4 views

Malicious code in fuel-react (npm)

Source: amazon-inspector 8e35f4772b8cba3555519c250662c67395bf57d89feed3feba7ea067b6bb2c27 The package's postinstall.js script executes automatically on npm install and collects host identity plus environment variables os.hostname, process.env and transmits them via an https request. The package...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/08/22 12:31 a.m.•18 views

Malicious Package

Overview fuel-react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.6AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/08/21 10:10 p.m.•32 views

MAL-2026-14355 Malicious code in fuel-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e35f4772b8cba3555519c250662c67395bf57d89feed3feba7ea067b6bb2c27 The package's postinstall.js script executes automatically on npm install and collects host identity plus environment variables os.hostname,...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 10:10 p.m.•39 views

Malicious code in fuel-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e35f4772b8cba3555519c250662c67395bf57d89feed3feba7ea067b6bb2c27 The package's postinstall.js script executes automatically on npm install and collects host identity plus environment variables os.hostname,...

5.4AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/17 9:37 p.m.•15 views

EUVD-2026-3169

Malicious code in eslint-plugin-fuel-react npm...

6.6AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/01/17 9:37 p.m.•16 views

MAL-2026-323 Malicious code in eslint-plugin-fuel-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99675eb06a245907c7a2133cf7d75af3037229a059d0a135bf8c3d518432a6a4 The package eslint-plugin-fuel-react was found to contain malicious code. Source: ossf-package-analysis...

5.5AI score
SaveExploits0
Rows per page
Query Builder