Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 3:34 p.m.•42 views

Malicious code in hook-augmenting-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbb17d535ecc8b30b2ab54a487691ec2e427f9dbc3c0e20acad414bb25f3203 Analysis of this package version produced no static or behavioral findings indicating installer-side harm. No exfiltration, install-time code fetch,...

6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/07 3:34 p.m.•4 views

Malware in hook-augmenting-module

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/07/07 3:34 p.m.•30 views

MAL-2026-6933 Malicious code in hook-augmenting-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbb17d535ecc8b30b2ab54a487691ec2e427f9dbc3c0e20acad414bb25f3203 Analysis of this package version produced no static or behavioral findings indicating installer-side harm. No exfiltration, install-time code fetch,...

6.1AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/07 3:34 p.m.•16 views

Malicious Package

Overview hook-augmenting-module is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder