Lucene search
+L

361285 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/17 2:29 p.m.•37 views

Malicious code in ragacateslikodi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a5a8774b4ce673a050b7e26c7d08aec66320fc14257196157363935ac19aa1 On require/import of the package's main entry, a top-level async IIFE probes http://localhost:5000 for a hardcoded set of paths /admin, /flag, /profi...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/09/17 2:29 p.m.•19 views

MAL-2026-16252 Malicious code in ragacateslikodi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a5a8774b4ce673a050b7e26c7d08aec66320fc14257196157363935ac19aa1 On require/import of the package's main entry, a top-level async IIFE probes http://localhost:5000 for a hardcoded set of paths /admin, /flag, /profi...

5.8AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/09/17 12:43 p.m.•31 views

MAL-2026-16250 Malicious code in marketing-mcp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87216e00fe68e2de8b140f1f9ffc2db5a8e814f38030e2eb6120c9ae9e7ca3ff The package exposes an MCP tool sendpath that reads a caller-specified local file and POSTs its contents to a hardcoded...

5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•7 views

Malicious code in leda-middleware-pm2-impulse (npm)

The package leda-middleware-pm2-impulse was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in leda-development-config-eclipse (npm)

The package leda-development-config-eclipse was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•4 views

Malicious code in lectron (npm)

The package lectron was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•6 views

Malicious code in leda-fornax-dagda-css-loader (npm)

The package leda-fornax-dagda-css-loader was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•5 views

Malicious code in leda-betelgeuse-chariklo-backend (npm)

The package leda-betelgeuse-chariklo-backend was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•14 views

Malicious Package

Overview leadconduit-calq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•12 views

Malicious Package

Overview latinarmadilloz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•14 views

Malicious Package

Overview lazywolfz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•13 views

Malicious Package

Overview leadingkingfisherz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•16 views

Malicious Package

Overview leadingsheepz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•13 views

Malicious Package

Overview leda-farout-alphard-kastra is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•13 views

Malicious Package

Overview leadingcrabz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•12 views

Malicious Package

Overview layla-poke20 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•16 views

Malicious Package

Overview leda-janus-solis-dynamo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 8:17 a.m.•13 views

Malicious Package

Overview ldhemrdhs79029 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•5 views

Malicious code in learns (npm)

The package learns was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•5 views

Malicious code in learnx-zh (npm)

The package learnx-zh was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder