Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 6:27 a.m.22 views

Malicious code in ishowfeet20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57470f610cd7e988daef50a3a2587778f3dce2cb1584572d4a1795876f9cf6fe The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

6.2AI score
SaveExploits0References4
Snyk
Snyk
added 2026/06/01 9:0 p.m.15 views

Malicious Package

Overview ishowfeet20 is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder