Lucene search
+L

5 matches found

Snyk
Snyk
•added 2026/09/24 12:41 a.m.•16 views

Malicious Package

Overview godzzz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/23 6:31 a.m.•9 views

Malicious code in godzzz (npm)

Source: amazon-inspector 39f05673527822a16dc88d65a9ff9471548f8046fc28c7930fd8958dbcc38f3a The npm package [email protected] ships cdpinject.js which imports http, https, childprocess and fs at the top of the file, reads process.env including process.env.USER, reads files from disk via...

5.9AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/09/23 4:48 a.m.•19 views

MAL-2026-16463 Malicious code in godzzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f05673527822a16dc88d65a9ff9471548f8046fc28c7930fd8958dbcc38f3a The npm package [email protected] ships cdpinject.js which imports http, https, childprocess and fs at the top of the file, reads process.env including...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/23 4:48 a.m.•35 views

Malicious code in godzzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f05673527822a16dc88d65a9ff9471548f8046fc28c7930fd8958dbcc38f3a The npm package [email protected] ships cdpinject.js which imports http, https, childprocess and fs at the top of the file, reads process.env including...

5.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/22 6:01 p.m.•15 views

Malicious Package

Overview godzzz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder