Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•3 views

Malicious code in metavu (npm)

Source: amazon-inspector fc05e6833390f96b1a53f5d1612e613436e5002673da2f7a8c1e8e9f9f41c525 package.json declares preinstall: node index.js, which fires automatically on npm install. index.js collects hostname, platform, architecture, home directory, username/uid/gid/shell, OS details, the output o...

5.8AI score
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•34 views

Malicious Package

Overview metavu is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/18 3:56 p.m.•22 views

Malicious code in metavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc05e6833390f96b1a53f5d1612e613436e5002673da2f7a8c1e8e9f9f41c525 package.json declares preinstall: node index.js, which fires automatically on npm install. index.js collects hostname, platform, architecture, home...

5.3AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/06/18 3:56 p.m.•26 views

MAL-2026-6132 Malicious code in metavu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc05e6833390f96b1a53f5d1612e613436e5002673da2f7a8c1e8e9f9f41c525 package.json declares preinstall: node index.js, which fires automatically on npm install. index.js collects hostname, platform, architecture, home...

5.4AI score
SaveExploits0References2
Rows per page
Query Builder