Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 6:27 a.m.25 views

Malicious code in ishowfeet6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36674107d4252d441750a35559267123dd2bcb958925071bef6475a41d6e519a The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

6.2AI score
SaveExploits0References4
Snyk
Snyk
added 2026/06/01 9:0 p.m.12 views

Malicious Package

Overview ishowfeet6 is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate advertisi...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder