Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/10/26 4:27 p.m.•11 views

Malware in @ppa-web-components/ppa-headerfooter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/25 3:31 p.m.•12 views

Malicious code in @ppa-web-components/ppa-headerfooter (npm)

Source: amazon-inspector 32234bc8ba0c918d154d680b15a1bcb7ae6f6b7d20365c02095842b84e245dce The package ships a beacon.cjs script wired as both the postinstall lifecycle hook node beacon.cjs and a require-time side effect from index.js. On install and on require, the beacon POSTs installer...

5.9AI score
SaveExploits0References11Affected Software1
Snyk
Snyk
•added 2026/10/25 3:31 p.m.•4 views

Malicious Package

Overview @ppa-web-components/ppa-headerfooter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

9.8CVSS5.9AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/25 2:28 p.m.•35 views

MAL-2026-18274 Malicious code in @ppa-web-components/ppa-headerfooter (npm)

@ppa-web-components/ppa-headerfooter is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 1.0.0, 2.0.1, 2.0.0, 1.0.1, 99.0.1, 3.0.0 has a postinstall scri...

5.9AI score
SaveExploits0References11
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/25 2:28 p.m.•26 views

Malicious code in @ppa-web-components/ppa-headerfooter (npm)

@ppa-web-components/ppa-headerfooter is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 1.0.0, 2.0.1, 2.0.0, 1.0.1, 99.0.1, 3.0.0 has a postinstall scri...

5.9AI score
SaveExploits0References11
Microsoft KB
Microsoft KB
•added 2020/07/14 7:00 a.m.•172 views

End of support for Office 2016 and Office 2019

End of support for Office 2016 and Office 2019 Applies To Office 2019 Office 2016 Get help with Copilot Tell me about end of support for Office 2016 for Mac. Show me how to remove the conflicting 2013 app. Support for Office 2016 and Office 2019 ended on October 14, 2025. While your Office 2016 a...

8.8CVSS6.7AI score0.11229EPSS
SaveExploits0
Rows per page
Query Builder