Lucene search
+L

37 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in launchdarkly-cpp-server (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in launchdarkly-cpp-internal (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/17 7:19 a.m.•10 views

Malicious Package

Overview launchdarkly-cpp-internal is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•6 views

Malicious code in epic-launchdarkly (npm)

Source: amazon-inspector fca91fa6453c6a332f567a74f92229397956b0b993bc49af3de7c0eaf3585c8b The package epic-launchdarkly was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/04 1:18 p.m.•26 views

Malicious code in @servicetitan/launchdarkly-service (npm)

npm/@servicetitan/launchdarkly-service is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

5.7AI score
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2026/08/04 1:18 p.m.•3 views

Malware in @servicetitan/launchdarkly-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/08/04 1:18 p.m.•33 views

MAL-2026-11884 Malicious code in @servicetitan/launchdarkly-service (npm)

npm/@servicetitan/launchdarkly-service is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

5.7AI score
SaveExploits0References12
Github Security Blog
Github Security Blog
•added 2026/08/04 11:17 a.m.•4 views

Malicious code in launchdarkly-ai-server-sdk (PyPI)

Source: kam193 7d6642383cc89e975e740067b88a401953adee9187b37a14a33acc833b32d727 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

6.2AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/08/04 11:17 a.m.•22 views

Malicious Package

Overview launchdarkly-ai-server-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/08/04 10:10 a.m.•29 views

MAL-2026-11519 Malicious code in launchdarkly-ai-server-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460d36c416400537f8c90171c7821b191e0af69df3ec9f0c906300f50b0ea93f launchdarkly-ai-server-sdk 1.0.1 pypi was scanned across 7 files with no a static rule matches and no traced behavior of concern. No install-time or...

5.8AI score
SaveExploits0References2
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•10 views

LaunchDarkly - Detect

Detects the presence of LaunchDarkly, a feature management and feature flag platform. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the presence of LaunchDarkly, a feature management and feature flag platform.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

5.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/07/27 10:59 p.m.•4 views

Malicious code in launchdarkly-ai-tooling (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References4Affected Software1
osv_mal
osv_mal
•added 2026/07/07 12:57 p.m.•26 views

MAL-2026-7311 Malicious code in launchdarkly-ai-tooling (npm)

--- -= Per source details. Do not edit below this line.=-...

6.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/07 12:57 p.m.•46 views

Malicious code in launchdarkly-ai-tooling (npm)

--- -= Per source details. Do not edit below this line.=-...

5.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/02/04 9:46 a.m.•24 views

MAL-2026-735 Malicious code in docusaurus-plugin-launchdarkly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875ce6b5b0d95c7100cdba68bed891c712b414716f07147e6a3f04f4f9b4789 The package docusaurus-plugin-launchdarkly was found to contain malicious code. Source: ghsa-malware...

5.5AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/02/04 9:46 a.m.•14 views

Malicious Package

Overview docusaurus-plugin-launchdarkly is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/04 9:46 a.m.•6 views

Malware in docusaurus-plugin-launchdarkly

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/02/03 1:59 a.m.•5 views

Malware in launchdarkly-cpp-networking

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/02/02 5:19 a.m.•16 views

MAL-2026-637 Malicious code in launchdarkly-cpp-networking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4fb76fdf3a3ab10ddc884a1fcc11f57ef3b0e44df500c5f2881f40cec0b20 The package launchdarkly-cpp-networking was found to contain malicious code. Source: ghsa-malware...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/02/02 5:19 a.m.•23 views

Malicious code in launchdarkly-cpp-networking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4fb76fdf3a3ab10ddc884a1fcc11f57ef3b0e44df500c5f2881f40cec0b20 The package launchdarkly-cpp-networking was found to contain malicious code. Source: ghsa-malware...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder