Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/14 7:24 p.m.•19 views

Malicious code in chalk-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fe2974289b691a9f5541068f2e399aecb14a719779202ff5999652ffe351db On npm install, postinstall.js runs a credential and cryptocurrency stealer against the installer's machine. It reads /.npmrc extracting authToken an...

5.8AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/15 12:00 a.m.•3 views

CVE-2006-6585: Undefined Security Weakness

The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later...

6.4CVSS5.8AI score0.01083EPSS
SaveExploits0References1
Rows per page
Query Builder