2 matches found
Malicious Package
Overview hello244a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
9.8CVSS6AI score
SaveExploits0References2
MAL-2026-5188 Malicious code in hello244a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bc9153129c6d11cd92a3d5bf7f772d768196014df7a42897d137d6da954085 package.json declares a postinstall script that, on npm install, 1 enumerates process.env plus os.hostname, os.platform, os.arch, and whoami output,...
6.1AI score
SaveExploits0References47
20