Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•7 views

Malicious code in innocent-package (npm)

Source: ossf-package-analysis 6fc7d792ebeefb0b83aeaecc6964d6288dced704804e70e6d7531b6a6dffc4a2 The OpenSSF Package Analysis project identified 'innocent-package' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/03/20 4:59 a.m.•21 views

Malicious Package

Overview innocent-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/03/20 4:59 a.m.•24 views

MAL-2026-1976 Malicious code in innocent-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43dfe9cc2eebd7f30e81c4d84f86e0375a8f68621f3dd52156c93a9062e67c7 The package innocent-pkg was found to contain malicious code. Source: ghsa-malware e6e3d2128a98a7bfca4b4ef2d91cc684dad0a7386877a5673ecb0911489bbd7a A...

5.7AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/03/06 7:14 a.m.•15 views

Malicious Package

Overview innocent-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Rows per page
Query Builder