Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•24 views

Malicious Package

Overview loadashjs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/19 12:31 a.m.•5 views

Malicious code in loadashjs (npm)

Source: amazon-inspector 99f2ee2a45d09f0e66b8c9c6c4b3f2d19d39af009f71abffba1032b185fc4981 loadashjs is a lodash typosquat whose index.js exports an empty object; the only functional code is scripts/postinstall.js, which runs automatically on npm install. The postinstall script POSTs a JSON body...

6AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/08/18 11:57 p.m.•25 views

MAL-2026-14179 Malicious code in loadashjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f2ee2a45d09f0e66b8c9c6c4b3f2d19d39af009f71abffba1032b185fc4981 loadashjs is a lodash typosquat whose index.js exports an empty object; the only functional code is scripts/postinstall.js, which runs automatically ...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/18 11:57 p.m.•35 views

Malicious code in loadashjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f2ee2a45d09f0e66b8c9c6c4b3f2d19d39af009f71abffba1032b185fc4981 loadashjs is a lodash typosquat whose index.js exports an empty object; the only functional code is scripts/postinstall.js, which runs automatically ...

5.6AI score
SaveExploits0References1
Rows per page
Query Builder