Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2020/09/02 3:48 p.m.29 views

Malicious Package in commander-js

All versions of commander-js are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads an arbitrary file and executes its contents as a post-install script. Recommendatio...

3.3AI score
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2019/01/15 8:6 a.m.9 views

Malicious Package

commander-js is a malicious package designed to take advantage of users making a mistake when typing the name of a module to install. All versions of this package is considered malicious and must not be used. The package downloads a malicious file and executes the contents after installation...

6.6AI score
SaveExploits0
Rows per page
Query Builder