Lucene search
+L

6 matches found

osv_mal
osv_mal
•added 2026/08/07 5:25 p.m.•18 views

MAL-2026-13624 Malicious code in @depup/memfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267188642a5aa8db495698be0d44bd4fed45e0e247572d44da6b76e3d1b72a5e This package is an automated 'DepUp' republish of memfs whose lib/index.js and lib/index.d.ts have been stripped of the upstream source and rewritten...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/07 5:25 p.m.•37 views

Malicious code in @depup/memfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267188642a5aa8db495698be0d44bd4fed45e0e247572d44da6b76e3d1b72a5e This package is an automated 'DepUp' republish of memfs whose lib/index.js and lib/index.d.ts have been stripped of the upstream source and rewritten...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/11 6:02 a.m.•10 views

Malicious code in @jsonjoy-com/base64 (npm)

The package @jsonjoy-com/base64 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da3501193ea6192ce6e4a5ea194eb4cfd31e27c85d274023f53ef6c5efde39a Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/09/11 6:02 a.m.•9 views

MAL-2025-47031 Malicious code in @jsonjoy-com/base64 (npm)

The package @jsonjoy-com/base64 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da3501193ea6192ce6e4a5ea194eb4cfd31e27c85d274023f53ef6c5efde39a Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/09/11 6:02 a.m.•10 views

MAL-2025-47073 Malicious code in jsonjoy.com (npm)

The package jsonjoy.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84ed9a921baae45f95050be87e9143e6c63cde1254639e1a9e4a1eb768724f13 Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/09/11 6:02 a.m.•6 views

Malware in @jsonjoy-com/base64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder