2 matches found
Malicious Package
Overview holvipartners is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
9.8CVSS7AI score
SaveExploits0References3
MAL-2022-3657 Malicious code in holvipartners (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f64b4ac4a1fbb5c742f5167e97bd54deaf588ccc6c9ff7ec77da3bbab98e6555 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
7AI score
SaveExploits0References1
20