Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/27 1:51 p.m.•22 views

Malicious code in module-relpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bf564e2647cb828bb130eaaba71b21fb6d78928cb6e3a74165bbb2fc546b98 The package presents itself as relative-import-path README title, homepage and repository URL point at github.com/marko-js/relative-import-path, and...

5.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/08/27 1:51 p.m.•7 views

Malware in module-relpath

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/08/27 1:51 p.m.•19 views

MAL-2026-14561 Malicious code in module-relpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03bf564e2647cb828bb130eaaba71b21fb6d78928cb6e3a74165bbb2fc546b98 The package presents itself as relative-import-path README title, homepage and repository URL point at github.com/marko-js/relative-import-path, and...

5.9AI score
SaveExploits0References4
Snyk
Snyk
•added 2026/08/27 1:51 p.m.•24 views

Malicious Package

Overview module-relpath is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder