Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 6:27 a.m.16 views

Malicious code in ishowfeet3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc732922556c087a288d536adf6ef6bf7d643946239cd9563e0a9bc9b6960205 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

6.2AI score
SaveExploits0References4
Snyk
Snyk
added 2026/06/01 9:0 p.m.9 views

Malicious Package

Overview ishowfeet3 is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate advertisi...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder