Lucene search
+L

1415 matches found

OSV
OSV
added 2026/05/19 12:0 a.m.16 views

MAL-2026-3942 Malicious code in @antv/g-plugin-dom-interaction (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.20 views

MAL-2026-3885 Malicious code in @antv/f-react (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.12 views

MAL-2026-4114 Malicious code in @antv/x6-react-shape (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.21 views

MAL-2026-3932 Malicious code in @antv/g-plugin-a11y (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.21 views

MAL-2026-3900 Malicious code in @antv/f6 (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.11 views

MAL-2026-4064 Malicious code in @antv/li-sam-assets (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.13 views

MAL-2026-3857 Malicious code in @antv/chart-linter (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.9 views

MAL-2026-4028 Malicious code in @antv/infographic (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.11 views

MAL-2026-4006 Malicious code in @antv/gi-assets-neo4j (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.10 views

MAL-2026-4119 Malicious code in @antv/xflow-core (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.10 views

MAL-2026-3880 Malicious code in @antv/expr (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.13 views

MAL-2026-3978 Malicious code in @antv/g2-plugin-slider (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.14 views

MAL-2026-3950 Malicious code in @antv/g-plugin-physx (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.10 views

MAL-2026-3945 Malicious code in @antv/g-plugin-gpgpu (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.19 views

MAL-2026-3871 Malicious code in @antv/dipper-hooks (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.10 views

MAL-2026-4149 Malicious code in onfire.js (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.11 views

MAL-2026-4102 Malicious code in @antv/x6-plugin-dnd (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.22 views

MAL-2026-3982 Malicious code in @antv/g6 (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.10 views

MAL-2026-3883 Malicious code in @antv/f-lottie (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.7 views

MAL-2026-3850 Malicious code in @antv/algorithm (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
Rows per page
Query Builder