Lucene search
+L

2 matches found

Snyk
Snyk
added 2022/06/23 9:24 a.m.2 views

Malicious Package

Overview holvipartners is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7AI score
SaveExploits0References3
OSV
OSV
added 2022/05/31 1:36 p.m.6 views

MAL-2022-3657 Malicious code in holvipartners (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f64b4ac4a1fbb5c742f5167e97bd54deaf588ccc6c9ff7ec77da3bbab98e6555 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder