2 matches found
Malicious Package
Overview klook-node-framework-site is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovere...
9.8CVSS7.1AI score
SaveExploits0References3
MAL-2022-4188 Malicious code in klook-node-framework-site (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db3790c54915e431cf9b3177bb3d1ecf05ede64d886816930b922bb93a0c0a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
7AI score
SaveExploits0References1
20