Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/06 6:30 a.m.•8 views

Malicious code in hardhat-init (npm)

Source: amazon-inspector e2f570102756d04aa466677488cd13aacac2eb941176523bc4ff024d214affbb The npm package hardhat-init presents itself as Hardhat initialization tooling and ships a README, LICENSE, and index.d.ts copied from the pino logger project with the name substituted. The main entry index....

6.4AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/10/06 4:27 a.m.•23 views

MAL-2026-17636 Malicious code in hardhat-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f570102756d04aa466677488cd13aacac2eb941176523bc4ff024d214affbb The npm package hardhat-init presents itself as Hardhat initialization tooling and ships a README, LICENSE, and index.d.ts copied from the pino logge...

6.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/06 4:27 a.m.•25 views

Malicious code in hardhat-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f570102756d04aa466677488cd13aacac2eb941176523bc4ff024d214affbb The npm package hardhat-init presents itself as Hardhat initialization tooling and ships a README, LICENSE, and index.d.ts copied from the pino logge...

6.4AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/10/05 6:34 p.m.•12 views

Malicious Package

Overview hardhat-init is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder